last executing test programs: 4m29.930593925s ago: executing program 0 (id=593): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000140)=""/46, 0x2e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getdents(r0, &(0x7f0000000040)=""/199, 0xc7) 4m29.77328381s ago: executing program 0 (id=595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000e06010300000000000000000100000005000100070000000900020073797a30004000008afc5f122e950fa143b605622d955d900b2b0fd286fab4fceb439ded350ae7a00c47f9f7f3be7f554ab71292df1961629b71d9d67042d8f74f367478a874c482ef86c32f16aceffeb88b34a9bf81ca19c8c75efd3b4f15fc3d907561e101066caaec128afe"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x6400c804) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000580)={'syz1\x00', {0x3, 0xd, 0x4, 0x58e}, 0x17, [0x0, 0x2, 0xfffffff8, 0x7, 0x2, 0x2, 0xe737, 0x6, 0xfff, 0x5, 0x9, 0xfffffffc, 0x51f, 0x68000000, 0x10001, 0x9, 0x580e, 0x4, 0x7, 0x80, 0x0, 0xb, 0x5, 0x85, 0x1, 0x3, 0x4c3a, 0x1, 0x4, 0x1, 0x10001, 0x9, 0x6, 0x1, 0x0, 0xfff, 0x9, 0x9, 0x7b0, 0x1, 0x3, 0x3, 0x8, 0x1, 0xfffff8ba, 0x6, 0x9, 0x1, 0xfffffffb, 0x7ff, 0xfffff001, 0x400, 0x305, 0xd, 0x0, 0x6, 0x6000000, 0x10, 0x0, 0x7, 0x20000006, 0x2, 0xee1, 0x4], [0x2, 0x3, 0x7, 0xfffffe96, 0x9, 0x0, 0x80, 0xa, 0x80, 0x3c, 0x0, 0x1, 0x1ff, 0xa, 0x8, 0x4, 0xfffffffc, 0x365e, 0x3ff, 0x10, 0x4, 0x5, 0x8, 0x2, 0x7fff, 0x3, 0x3, 0xffff, 0xfffffa65, 0x2, 0x7fffffff, 0x9, 0x9, 0x5, 0x8, 0x6, 0xb, 0xf7, 0xcc7, 0x7fffffff, 0x10, 0x2, 0xfffffffb, 0x40, 0x0, 0x2, 0x2, 0x80000001, 0x9, 0x100000, 0x8, 0x4, 0x4, 0x1, 0x7, 0x100, 0x0, 0x0, 0x1d4, 0x1, 0x1, 0xfffffff9, 0xf7, 0x8], [0x8, 0x4cd, 0x3, 0x1, 0x3, 0x0, 0xb, 0x6, 0xffff, 0x4, 0x800, 0x101, 0xdce6, 0xa, 0xf, 0x8, 0x6, 0x1, 0x0, 0x101, 0x200, 0x22, 0xb, 0x0, 0x40, 0x0, 0xc, 0x9, 0xff, 0x37509810, 0x2, 0x0, 0xf2, 0x7ff, 0x7, 0xfffffffa, 0x24, 0x1, 0x3, 0x6, 0x8, 0x0, 0xe5, 0xfffffffa, 0x9, 0x7, 0x0, 0x9, 0x1, 0x4, 0xb, 0x4, 0x40, 0x6, 0x0, 0x7, 0x2d6c57e4, 0x8000, 0x7, 0x5, 0x6, 0x10, 0x7], [0x8000, 0x9, 0x32, 0x0, 0x7, 0x3, 0x6, 0x7f, 0x5, 0x7f, 0x4d1c, 0xffff, 0xfffff968, 0xee, 0x7, 0x1ff, 0x0, 0xfffffbff, 0x7, 0x101, 0xc80, 0x9, 0x9, 0x3, 0x7e, 0x71, 0x5, 0x1ff, 0x7, 0xfffffff8, 0x5, 0x8, 0x8d, 0x34, 0x9377, 0x4, 0x1, 0x6, 0x1ff, 0x1ff, 0x7ff, 0x40, 0xd, 0x4, 0x7, 0xffffffc0, 0x8, 0x1, 0x0, 0x65, 0x7e, 0x0, 0x1ea, 0x0, 0x800, 0x4, 0xc, 0x2, 0x10001, 0x7fffffff, 0x8, 0x1000, 0x0, 0xffffff7f]}, 0x45c) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 4m28.597542027s ago: executing program 0 (id=599): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0x6, @empty, 0x1}, r1, 0x40099d}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4m28.308312265s ago: executing program 0 (id=601): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000280)={[{@nogrpid}, {@bh}, {@bsdgroups}]}, 0x0, 0x52c, &(0x7f0000000640)="$eJzs3d9rY1kdAPBvMv2Rdjrbru7DKuqO6+oowyRtZrcs+6DriyDLssK6TyKzpc2U0qQpTbpua8EO+Oar4IBP+if4IPggzJPvvumbLyMojDo4TAWRyE1uOm2adMq0aWaazwcuOefc2/s9J3DP6T1J7glgaF2NiN2IGIuIjyNiOi3PpFu829qS4x4/3Fnce7izmIlG48N/jqRH7iy2j2+7nJ4zF/FBkh/vEre2tb26UC6XNtJ8oV5ZL9S2tm+sVBaWS8ultWJxfm5+9u2bbxXPrK2vVX7z4Dsr7330+9998f4fd7/x46TO32rtGkvadmaBDmi9L6MxdaAseefe60ewAbiUtmds0BXhmWQj4jMR8Xqa3pcbXJ0AgP5qNKajMX0w31vmBMcAAM+/5J5/KjLZfHr/PxXZbD7fnMPLvRKT2XK1Vr9+u7q5thTNOayZGM3eXimXZtO5wpkYzST5uWb6Sb7Ykb8ZES9HxM/HJ5r5/GK1vDSof3oAYMhd7hj/H423xv8T8AkBALzIjOQAMHyOjv+jA6kHAHB+3P8DwPA5MP53+60uAHAB5Tp++w8AXHwH7v9Huh7wavzkh+dXHQDgHPj8HwCGyvfefz/ZGnvp86+XPtnaXK1+cmOpVFvNVzYX84vVjfX8crW63HxmT+Vp5ytXq+tzb8bmp4V6qVYv1La2b1Wqm2v1W83net8q+WEBAAzey6/d+3MmInbfmWhu0V7LwRcC4MJzmcPwujToCgAD0/37PsAwMB8PZJ6yv+dXhO72/puJU9QH6L9rn+sx/9/tf4M7+6n/Nc6vikCfmP+H4XW6+X+zB/AiM/8Pw6vRyFjPHwCGzAnu4H1FEC64Z/78HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbYVHPLZPPpWuBTkc3m8xFXImJmYjRze6Vcmo2IlyLiT+Oj40l+btCVBgBOKfv3TLr+17XpN6Y6945l/jPefI2IH/3yw198ulCvb8wl5f/aL6/fTcuLXQOM978NAMABI50F7XG6PY631/d9/HBnsb2dZwUffLu1uGgSdy/d2lVvVT4XoxEx+e/MocZkzmhh4t07EfFqZ/uz+/tn0pVPO+Mnsa/0LX40Wzh1KH72UPxsc1/rNXkvPnsGdYFhcy/pf97tdv1l42rzNb3+Moc701z87Gjn+gza/d9eo7P/a13vH1zJNfuabv3f1ZPGePMP3+25786lxudHIvaO9L/tFaFzzdSR+CMRb3Q74U+/+Wizo+gvX/jS673iN34VcS2Oi99KFeqV9UJta/vGSmVhubRcWisW5+fmZ9+++Vax0JyjLrRnqo/6xzvXX+rd/ojJHvFzx7U/Ir7a66Qdfv3fj3/w5WPif/0r3eJn45Vj4idj4tdOGH9h8rc9l+9O4i/1aP/Iofhjh/4uKbt+wvj3/7q9dMJDAYBzUNvaXl0ol0sbEqdN5Pp15svPSQMleiT+9tGha2rg9TmTxMC6JOCcPLnoB10TAAAAAAAAAAAAAACgl9r300f+9fHHcINuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfX/wMAAP//OkHLZw==") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r0, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x220) 4m27.753451443s ago: executing program 0 (id=604): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000180)={0x2}, 0x2) 4m26.696519906s ago: executing program 0 (id=607): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6eb, &(0x7f0000001240)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa) lseek(r0, 0x7fff, 0x0) getdents(r0, 0x0, 0x58) 4m25.423901885s ago: executing program 32 (id=607): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6eb, &(0x7f0000001240)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa) lseek(r0, 0x7fff, 0x0) getdents(r0, 0x0, 0x58) 1m48.766185025s ago: executing program 4 (id=1269): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m48.568611032s ago: executing program 4 (id=1270): syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000000a80)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b72f503656169e734fdc2da8c998a8700232e5263a04392efa56fc98553afa5a498c8c3a3206f2b25a00c0ec0d1202c822ab708037a4c29a9c81216c73358cda8b1a2532650070aaf77d3ac8e46f2b2b5ed7828c6165514d2f40c6cf8eb2e325f9d2b7750af696145751cdfc7d00f6021f29a689969eadb6a870fb43b3f6badebdc0048aa9956828007502b6200000000", @ANYRES16, @ANYRES64, @ANYRES8], 0x1, 0x65c, &(0x7f0000002280)="$eJzs3V1rG+n5x/HfyLKs+A/hT1uWEPJwJ+mCQ1NFkjcOIoV2OhrZs5U0YkZubSgs6cZeQuRsm6TQ+GTJSR9g+wb2bE+W0hdR6HHfRQ8LS3tW6MmUebJsS7LkRLF3t9+PiXVr5pq5r3tGmYuxpBkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABZTrNarVlqe93NLTOZ0wz8zgnz07Ut6nbauD2mqy+O9CtZ8T+Vy7qUTrr0neHsd+JfN3UlfXZF5fihrP3/e+f/H3y7WMiXPyGh16FImmGdpSxJY56/3H/ycDDYeTbnRL4CVJghaN3teqHvdex113ihbxpra9W7G63QtLySwu2w73aME7iFvh+YFee2qTUaq8atbPub3fWm3Xbzife/X69W18z7S9mWvft+JXQ2vHbb664nMfHsOOa++fTnaYhrd4zZfTzYWZ2WZBxUmyWoPi2oXq3Xa7V6vbZ2r3HvfrVaHJlQPUYjEXN/0eJrZn4Hb+ANFeL6/3dLaqusrja1JTP2x1FTgXx1JszP5PX/3bvuif0erv95lb80nH1ZSf2/lj67Nqn+T8jFyCQLjJtjTZj+ej/P9VL7eqKHGmigHT2bz3qvzy/Dt/uzLhUlT6F8eerI1rpcmWyKUUNrWlNVH2hDLYUyaslTW65CbStUX646yT4J5MpOWrEVOboto5oaamhVRq4q2pavTXW1rqZs/TuKol09Trb76gk5Kg+qzRJUPyFoUv3/xSdp1lPrvyXq/zdafvyaJQY4d1F2/n9K199ONgAAAAAA4G2wkr++W8l791clRWp5bbd63mkBAAAAAIA5St75vxI/LMatq7ImnP9HZ58bAAAAAACYDyv5jp0laTn5UL81/CbULB8CWDiDFAEAAAAAwBtK3v+/VpKi5Npr12Wd6vwfAAAAAAB8Dfz+0DX2i/k1dqP8bf2CpLC3ZP3ln0sKFq1Xva3vWnt2PMfey2JGPgHQb122LmYX6k0eSpKSZ457xbqaBmUXwbTSC/tKX+5Ou9a/FRxLoLSQ//liWgJrxeyZPtWNNOZG1u+j/YKSOWkvyy2v7VYcv/2gJtu+WOi7W/1fP338Gyk4GOfu48FO5cOPB4+SXF7Fk17txXl8ciSdwrRcXijbFlfHjviCWnmXf+h2lq2k32o+/gXZe4XDHc02/t/qZhpzczl9XN7P90Ay/nI8/lol2WXD0cej+uxPw9HXjo983I6YkEU5yeJWGnNr5Vb6kOeXZfG9BaleOb4PSvFLcLgt6oezmL4trH+NbIspWcTbYjXO4q/xioavhCNZrJ4ui5E9AgDnZXdYhZKLmI9eY/943X2do9z06v6jo728+CxKv3C4IBWz9yZO7KWs+Ii+kqxbJSUH1uLlg6Ps3o38iF7N6kpZE47o1TeobnFffx7eAylLe6Su/CeKoge1pN8/HvSbVtXP4wU+n9hv2K4vxCO8+2Lvl8kF8GMf7Xy087ReX12rvlet3qtrMRlG9kDtAQCMMf0eO1MjrPcOzqof/ePdtHWk4n3r4CMFFX2ojzXQI93JbyFwffxalw99DOHO6FlrHHtBOh5b052JZ3VJLU1jf7Zd+mEalPxeVL7I0Uo9XO/qW90HAACctZuNrDGhDs9S/+8k592SVi4fOu8+OGc/VsuP3yF4Us2tndk2AADgf40bfGkt939nBYHX+6DWaNTs/oZrAt/5iQm85rprvG7fDZwNu7vuml7g933Hb5teoCWv6YYm3Oz1/KBvWn5gen7obZmW13ZNduv30O3Y3b7nhL22a4eucfxu33b6pumFjult/rjthRtukCwc9lzHa3mO3ff8rgn9zcBxK8aErnso0Gu63b7X8uJm1/QCr2MH2+anfnuz45qmGzqB1+v76Qrzvrxuyw86yWorik59o0MAAL6Jnr/cf/JwMNh5NqmRnNFPiRk2SuNWmPfFO84AAHw1jFbpicpnkhAAAAAAAAAAAAAAAAAAAAAAABgx/St9p2wsjvuyoHQw5VcXZ1qPpXkndppG4fUX/9sJMRcOpuSb/3DMq3MYqdJGcf5rvnCar43OofGD3XSLToyJZ46dtXSwL4rz/+8QN55+MWFWFEXRyYsvHd2GpZMGeLRRlPSs9Aa74HyORwDOzn8DAAD//+I0QI0=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x18000030, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) 1m48.166848554s ago: executing program 4 (id=1273): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91", 0x1}], 0x1}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1m46.502413655s ago: executing program 4 (id=1277): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000040)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x400, 0x700) 1m45.581218414s ago: executing program 4 (id=1282): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r0}, 0x0, &(0x7f00000013c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m44.962173063s ago: executing program 4 (id=1285): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2d}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0xc, r0, 0x0, 0x0, 0x9, 0xfffffffffdffffff}) 1m44.379530521s ago: executing program 33 (id=1285): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2d}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0xc, r0, 0x0, 0x0, 0x9, 0xfffffffffdffffff}) 11.946239889s ago: executing program 1 (id=1783): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000000, 0x9d8}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x32}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x4}, 0x3501, 0x4, 0x0, 0x0, 0xfffffff7}]}]}, 0xfc}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 10.850079073s ago: executing program 1 (id=1786): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26044028}, 0x800) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x30a) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000600)={0x1, 0x0, [{0x400000b1, 0x0, 0x7f}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]}) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @nfc, @l2tp={0x2, 0x0, @empty}, 0xa00, 0x0, 0x0, 0x0, 0x51, 0x0, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000003600), 0x44, 0x0) ioctl$RNDADDENTROPY(r8, 0x40085203, &(0x7f0000003640)={0x80000000}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 10.519509083s ago: executing program 1 (id=1789): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "b7395d376552ed9c", "3d2d61bb55033c6499001eeeb0c62d5f", "4c132922", "324e359f192dfb6b"}, 0x28) 10.30053357s ago: executing program 1 (id=1792): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x0, 0x42}) 6.283110125s ago: executing program 1 (id=1815): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001"], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) sendmmsg$inet(r0, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="d9", 0x1}], 0x1}}], 0x1, 0x0) 3.979451866s ago: executing program 5 (id=1830): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x5, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x8c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b400000000048000480440001800b000100657874686472000034000280080001400000000c080003400000000008000440000000220500020007000000080006400000000308000540000000000900010073797a300000000020000000030a010300000000000000000a0000020900030073797a300000000044010000080a01080000000000000000010000073a00074032e97608c07b8f34d704cc507d07a8d4c429672a9b6841e516ce194f03354b3c46a930469ce36ee8391a02352a70d543c633dc17a9d300007900074012119f33dbd27dbba871f33b8206fc0a59dac6df96baf86f3deffa20b8a2b13fa2fbc917a33ad4b9dc903553ff1e7533cd9d1e3f6a3248b10a63552977fab38d9ad7409cbd223b094a0bb6f0884c8839890d122f9b9963668c97749b2304852a8d461ccc39dc307f41ac41688a4f2d64a916dc532d00000008000a40000000000900010073797a30000000000900020073797a31000000002c00058008000140000086dd080001400000002c080001400000001608000140000000736afd0140000081"], 0x248}}, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x4e1e, @multicast1}}, {{0x2, 0x5e22, @remote}}}, 0x108) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @remote}, 0x8) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x1c, 0x1e, 0x100, &(0x7f00000004c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0x9) umount2(&(0x7f0000000780)='./file0\x00', 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000001300)=""/136, 0x0, 0x7000}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000700)=""/100, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000900)) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8}, 0x1c) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4028af11, &(0x7f00000001c0)) close_range(r3, 0xffffffffffffffff, 0x0) 3.775915412s ago: executing program 2 (id=1832): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0xd21, 0x0) r3 = openat$ocfs2_control(0xffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex, 0x13, 0x1, 0xf, &(0x7f0000000440)=[0x0], 0x1, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0), 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000005400010029bd662189f1000007000000", @ANYRES32=r0], 0x18}, 0x1, 0x0, 0x0, 0x22004000}, 0x40080c0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc01c5869, &(0x7f0000000780)={r2, &(0x7f0000000680)='tls', 0x201, &(0x7f00000006c0)={@align, {0x100, 0x2, 0x8, 0xffffffffffffff00}}, 0x7, &(0x7f0000000700), &(0x7f0000000740)=0x2f7}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB, @ANYRES64=r4], 0x20) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000004c0)={r8, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r9, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)}], 0x1) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$setlease(r11, 0x403, 0x0) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r12, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) 3.775100393s ago: executing program 5 (id=1833): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000280)={0x2000, 0x0, 0x2}, 0x18, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000001080)={0x4, 0x1, {0x4, @struct={0x1, 0x9}, r3, 0x4, 0x8, 0xb6, 0x80000001, 0x7ff, 0x0, @struct={0x80000001}, 0x203, 0x6, [0x4, 0x7, 0x1, 0xffffffffffffffff, 0x1, 0x1]}, {0x100, @struct, 0x0, 0x401, 0x6, 0x2, 0x7ff, 0x0, 0x0, @usage=0xff, 0x6, 0x100, [0xee, 0x4, 0x1, 0x8000000000000000, 0x6, 0x258b6064]}, {0x0, @usage=0xff0, 0x0, 0x10, 0x800, 0xe1, 0x2, 0x7, 0x4, @struct={0x7f, 0x8}, 0xc0000000, 0xd, [0x7, 0x7, 0x8, 0xa118930, 0x8, 0xf8]}, {0xfffffffffffff1ac, 0x21f, 0x100}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0xfffffffc) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00000000c25bb33e54015415a23a584ddbc836f7468b7c3ecb70830c58740accda21c574c1251d41ec0daf2d407ee82088e67e9b6730d971f4d9ca2c2cf6a2bd499ee2dc6c6be445d7e128fbbeeb008c4547b0612fa5b83710643da8aca1019f74f5c508000000000000001d95588a4ffa01e0cf45e9051805afcb4ea5cdfc5b0d3b35dc113b91dd45f994951355eb78a9f98b5f8470fac596aa5d9e8a5416cc6bd231", @ANYRES16=r7, @ANYBLOB="07006000000000000000020000000c0001800600010002000000"], 0x20}}, 0x4040) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2003, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) preadv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000580)=""/190}], 0x1, 0x5fab, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb1) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x2000300, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000006a00080029bd7000fbdbdf250a0000000000000008000a000000000008000500", @ANYRES32=0x0, @ANYBLOB="080001000110000004000001000005004c562fcc9f9c45461647a1939b1ec6193fe173d93a6056f969b0f2e76b9d9fc9fda152b9513bc201d63c452f44867ef124b73e0a", @ANYBLOB="04000b00"], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x40) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c04, 0x80) renameat(r9, &(0x7f0000001400)='./file0/file0\x00', r9, 0x0) getdents64(r9, &(0x7f00000028c0)=""/4092, 0xffc) 3.687547855s ago: executing program 3 (id=1834): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000380)=0x5, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x10}]}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 2.760871464s ago: executing program 2 (id=1835): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r1, r0, 0x4, r0}, 0x10) 2.760122944s ago: executing program 3 (id=1836): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) 2.690279746s ago: executing program 1 (id=1837): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfea7) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) rmdir(&(0x7f00000004c0)='./file1\x00') 2.676437797s ago: executing program 3 (id=1838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 2.619169519s ago: executing program 5 (id=1839): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$eJzs2j+LXFUcBuDfXRMSN2xmxH8kIB60UJtLZmqLLJKAOKBoRoiC5Ma9o8NcZ5a5w8KImK209SNYi6WdIClttvETWNhts2UK8Uoya5INY7GIO2Kep5kXzrzccziXwynu/uvffDYa1PmgmMValsXa5diNO1m0Yy3+shuvvXL95xfeu/7BW5u93pV3U7q6ea3TTSmdf/GnD7/4/qXbs3Pv/3D+xzOx1/5o/6D7295zexf2/7j26bBOwzqNJ7NUpJuTyay4WZVpa1iP8pTeqcqiLtNwXJfTI+ODarK9PU/FeGtjfXta1nUqxvM0KudpNkmz6TwVnxTDccrzPG2sB/9E/7s7TRMHzekb0TTNk9/Gudux8Wu0InsqZU9fzp69kT2/m104aJrWqqfKv8L+P94eOtTPRlRf7/R3+ovfxfjmIIZRRRmXohW/x93X5NAiX32zd+VSuqcdX1W3Dvu3dvpPHO13ohXt5f3Oop+O9s/EesTpiMN+N1rxzPJ+d2n/bLz68kPPz6MVv3wck6hiK+52H/S/7KT0xtu9R/oX7/0PAOD/Jk/3Lb2/5fnfjS/6x7gfPnK/OhUXT6127UTU889HRVWVU0EQhPth1ScTJ+HBpq96JgAAAAAAAAAAABzHSXxOuOo1AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/21/BgAA//9DWtUg") unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x42000, 0x85) getdents(r0, &(0x7f0000000680)=""/160, 0xa0) 2.554182401s ago: executing program 3 (id=1840): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r3 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex, 0x13, 0x1, 0xf, &(0x7f0000000440)=[0x0], 0x1, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0), 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000005400010029bd662189f1000007000000", @ANYRES32=r0], 0x18}, 0x1, 0x0, 0x0, 0x22004000}, 0x40080c0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc01c5869, &(0x7f0000000780)={r2, &(0x7f0000000680)='tls', 0x201, &(0x7f00000006c0)={@align, {0x100, 0x2, 0x8, 0xffffffffffffff00}}, 0x7, &(0x7f0000000700), &(0x7f0000000740)=0x2f7}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB, @ANYRES64=r4], 0x20) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000004c0)={r8, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r9, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{0x0}], 0x1) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$setlease(r11, 0x403, 0x0) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r12, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) 2.553832281s ago: executing program 2 (id=1841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x5, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x8c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b400000000048000480440001800b000100657874686472000034000280080001400000000c080003400000000008000440000000220500020007000000080006400000000308000540000000000900010073797a300000000020000000030a010300000000000000000a0000020900030073797a300000000044010000080a01080000000000000000010000073a00074032e97608c07b8f34d704cc507d07a8d4c429672a9b6841e516ce194f03354b3c46a930469ce36ee8391a02352a70d543c633dc17a9d300007900074012119f33dbd27dbba871f33b8206fc0a59dac6df96baf86f3deffa20b8a2b13fa2fbc917a33ad4b9dc903553ff1e7533cd9d1e3f6a3248b10a63552977fab38d9ad7409cbd223b094a0bb6f0884c8839890d122f9b9963668c97749b2304852a8d461ccc39dc307f41ac41688a4f2d64a916dc532d00000008000a40000000000900010073797a30000000000900020073797a31000000002c00058008000140000086dd080001400000002c080001400000001608000140000000736afd0140000081"], 0x248}}, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x4e1e, @multicast1}}, {{0x2, 0x5e22, @remote}}}, 0x108) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @remote}, 0x8) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x1c, 0x1e, 0x100, &(0x7f00000004c0)="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"}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0x9) umount2(&(0x7f0000000780)='./file0\x00', 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000001300)=""/136, 0x0, 0x7000}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000700)=""/100, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000900)) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8}, 0x1c) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4028af11, &(0x7f00000001c0)) close_range(r3, 0xffffffffffffffff, 0x0) 2.371332596s ago: executing program 3 (id=1842): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r3 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex, 0x13, 0x1, 0xf, &(0x7f0000000440)=[0x0], 0x1, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0), 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000005400010029bd662189f1000007000000", @ANYRES32=r0], 0x18}, 0x1, 0x0, 0x0, 0x22004000}, 0x40080c0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc01c5869, &(0x7f0000000780)={r2, &(0x7f0000000680)='tls', 0x201, &(0x7f00000006c0)={@align, {0x100, 0x2, 0x8, 0xffffffffffffff00}}, 0x7, &(0x7f0000000700), &(0x7f0000000740)=0x2f7}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB, @ANYRES64=r4], 0x20) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000004c0)={r8, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r9, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$setlease(r11, 0x403, 0x0) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r12, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) 2.233125101s ago: executing program 5 (id=1843): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000280)={0x2000, 0x0, 0x2}, 0x18, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000001080)={0x4, 0x1, {0x4, @struct={0x1, 0x9}, r3, 0x4, 0x8, 0xb6, 0x80000001, 0x7ff, 0x0, @struct={0x80000001}, 0x203, 0x6, [0x4, 0x7, 0x1, 0xffffffffffffffff, 0x1, 0x1]}, {0x100, @struct, 0x0, 0x401, 0x6, 0x2, 0x7ff, 0x0, 0x0, @usage=0xff, 0x6, 0x100, [0xee, 0x4, 0x1, 0x8000000000000000, 0x6, 0x258b6064]}, {0x0, @usage=0xff0, 0x0, 0x10, 0x800, 0xe1, 0x2, 0x7, 0x4, @struct={0x7f, 0x8}, 0xc0000000, 0xd, [0x7, 0x7, 0x8, 0xa118930, 0x8, 0xf8]}, {0xfffffffffffff1ac, 0x21f, 0x100}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0xfffffffc) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00000000c25bb33e54015415a23a584ddbc836f7468b7c3ecb70830c58740accda21c574c1251d41ec0daf2d407ee82088e67e9b6730d971f4d9ca2c2cf6a2bd499ee2dc6c6be445d7e128fbbeeb008c4547b0612fa5b83710643da8aca1019f74f5c508000000000000001d95588a4ffa01e0cf45e9051805afcb4ea5cdfc5b0d3b35dc113b91dd45f994951355eb78a9f98b5f8470fac596aa5d9e8a5416cc6bd231", @ANYRES16=r7, @ANYBLOB="07006000000000000000020000000c0001800600010002000000"], 0x20}}, 0x4040) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2003, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) preadv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000580)=""/190}], 0x1, 0x5fab, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb1) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x2000300, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000006a00080029bd7000fbdbdf250a0000000000000008000a000000000008000500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="04000b00"], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x40) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c04, 0x80) renameat(r9, &(0x7f0000001400)='./file0/file0\x00', r9, 0x0) getdents64(r9, &(0x7f00000028c0)=""/4092, 0xffc) 2.100748595s ago: executing program 2 (id=1844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0xd21, 0x0) r3 = openat$ocfs2_control(0xffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex, 0x13, 0x1, 0xf, &(0x7f0000000440)=[0x0], 0x1, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0), 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000005400010029bd662189f1000007000000", @ANYRES32=r0], 0x18}, 0x1, 0x0, 0x0, 0x22004000}, 0x40080c0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc01c5869, &(0x7f0000000780)={r2, &(0x7f0000000680)='tls', 0x201, &(0x7f00000006c0)={@align, {0x100, 0x2, 0x8, 0xffffffffffffff00}}, 0x7, &(0x7f0000000700), &(0x7f0000000740)=0x2f7}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB, @ANYRES64=r4], 0x20) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000004c0)={r8, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r9, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)}], 0x1) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$setlease(r11, 0x403, 0x0) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r12, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) 1.763435125s ago: executing program 3 (id=1845): pipe(&(0x7f0000000140)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0xd, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x40, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x1, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x5, 0x57, 0x4, 0x8000003, 0x101, 0x3, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000001000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80015b11, 0x0) 1.166845854s ago: executing program 5 (id=1846): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) unshare(0x20060400) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x86, &(0x7f00000001c0)}, 0x10) 990.212909ms ago: executing program 2 (id=1847): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000280)={0x2000, 0x0, 0x2}, 0x18, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000001080)={0x4, 0x1, {0x4, @struct={0x1, 0x9}, r3, 0x4, 0x8, 0xb6, 0x80000001, 0x7ff, 0x0, @struct={0x80000001}, 0x203, 0x6, [0x4, 0x7, 0x1, 0xffffffffffffffff, 0x1, 0x1]}, {0x100, @struct, 0x0, 0x401, 0x6, 0x2, 0x7ff, 0x0, 0x0, @usage=0xff, 0x6, 0x100, [0xee, 0x4, 0x1, 0x8000000000000000, 0x6, 0x258b6064]}, {0x0, @usage=0xff0, 0x0, 0x10, 0x800, 0xe1, 0x2, 0x7, 0x4, @struct={0x7f, 0x8}, 0xc0000000, 0xd, [0x7, 0x7, 0x8, 0xa118930, 0x8, 0xf8]}, {0xfffffffffffff1ac, 0x21f, 0x100}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0xfffffffc) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00000000c25bb33e54015415a23a584ddbc836f7468b7c3ecb70830c58740accda21c574c1251d41ec0daf2d407ee82088e67e9b6730d971f4d9ca2c2cf6a2bd499ee2dc6c6be445d7e128fbbeeb008c4547b0612fa5b83710643da8aca1019f74f5c508000000000000001d95588a4ffa01e0cf45e9051805afcb4ea5cdfc5b0d3b35dc113b91dd45f994951355eb78a9f98b5f8470fac596aa5d9e8a5416cc6bd231", @ANYRES16=r7, @ANYBLOB="07006000000000000000020000000c0001800600010002000000"], 0x20}}, 0x4040) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2003, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) preadv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000580)=""/190}], 0x1, 0x5fab, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb1) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x2000300, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000006a00080029bd7000fbdbdf250a0000000000000008000a000000000008000500", @ANYRES32=0x0, @ANYBLOB="080001000110000004000001000005004c562fcc9f9c45461647a1939b1ec6193fe173d93a6056f969b0f2e76b9d9fc9fda152b9513bc201d63c452f44867ef124b73e0a", @ANYBLOB="04000b00"], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x40) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c04, 0x80) renameat(r9, &(0x7f0000001400)='./file0/file0\x00', r9, 0x0) getdents64(r9, &(0x7f00000028c0)=""/4092, 0xffc) 599.820261ms ago: executing program 5 (id=1848): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x9, 0x10, 0x110, 0x10, 0xe, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 0s ago: executing program 2 (id=1849): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x40, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="3ef6a00080000048b8ac000000000000000f23d80f21f835800000100f23f80f20e035000002000f22e0b9800000c00f3235000100000f300f01d90fc00d299000000f0136c403294af00af2420fd0ceb9800000c00f3235002000000f30b9331001c00f3288f0", 0x67}], 0x1, 0x65, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): wMaxPacketSize 0 [ 297.916450][ T5809] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 297.943542][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.977757][ T5809] usb 4-1: Product: syz [ 297.990480][ T5809] usb 4-1: Manufacturer: syz [ 298.000798][ T5809] usb 4-1: SerialNumber: syz [ 298.032547][ T5809] usb 4-1: config 0 descriptor?? [ 298.249413][ T5809] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 298.282872][ T6892] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 298.450675][ T8682] usb 4-1: Couldn't submit interrupt_out_urb -90 [ 298.473063][ T23] usb 4-1: USB disconnect, device number 30 [ 298.501414][ T6892] usb 3-1: Using ep0 maxpacket: 8 [ 298.509178][ T6892] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 298.547422][ T6892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.591635][ T6892] pvrusb2: Hardware description: Terratec Grabster AV400 [ 298.621269][ T6892] pvrusb2: ********** [ 298.632707][ T6892] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 298.651246][ T6892] pvrusb2: Important functionality might not be entirely working. [ 298.676134][ T6892] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 298.719719][ T6892] pvrusb2: ********** [ 298.819285][ T2319] pvrusb2: Invalid write control endpoint [ 298.968046][ T2319] pvrusb2: Invalid write control endpoint [ 298.981463][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 299.002010][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 299.009895][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 299.035579][ T2319] pvrusb2: Device being rendered inoperable [ 299.101681][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 299.109586][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 299.114879][ T23] usb 3-1: USB disconnect, device number 26 [ 299.146134][ T2319] pvrusb2: Attached sub-driver cx25840 [ 299.161605][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 299.176595][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 299.349501][ T8706] loop4: detected capacity change from 0 to 1024 [ 299.372686][ T8706] EXT4-fs: Ignoring removed bh option [ 299.419521][ T8706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.719624][ T7673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.215567][ T8724] Cannot find add_set index 0 as target [ 300.818886][ T8708] loop3: detected capacity change from 0 to 32768 [ 300.934810][ T8708] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 301.190875][ T8708] XFS (loop3): Ending clean mount [ 301.532906][ T5776] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 302.110248][ T8754] loop4: detected capacity change from 0 to 512 [ 302.149044][ T8754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.176033][ T8754] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.417947][ T7673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.450003][ T8764] loop1: detected capacity change from 0 to 1024 [ 303.288745][ T8772] netlink: 36 bytes leftover after parsing attributes in process `syz.2.892'. [ 303.904267][ T8785] loop1: detected capacity change from 0 to 1024 [ 304.005189][ T8785] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 304.014474][ T8785] hfsplus: xattr search failed [ 304.166184][ T11] hfsplus: b-tree write err: -5, ino 25 [ 304.179877][ T11] hfsplus: b-tree write err: -5, ino 4 [ 304.193294][ T11] hfsplus: b-tree write err: -5, ino 2 [ 304.204889][ T11] hfsplus: b-tree write err: -5, ino 28 [ 304.480110][ T8798] loop3: detected capacity change from 0 to 4096 [ 305.356335][ T8817] Cannot find add_set index 0 as target [ 306.062454][ T1561] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 306.254337][ T1561] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 306.284133][ T1561] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 306.328928][ T1561] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 306.355185][ T1561] usb 3-1: config 220 has no interface number 2 [ 306.369278][ T1561] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 306.394995][ T1561] usb 3-1: config 220 interface 0 has no altsetting 0 [ 306.420214][ T1561] usb 3-1: config 220 interface 76 has no altsetting 0 [ 306.439256][ T1561] usb 3-1: config 220 interface 1 has no altsetting 0 [ 306.458791][ T1561] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 306.487667][ T1561] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.497014][ T1561] usb 3-1: Product: syz [ 306.506280][ T1561] usb 3-1: Manufacturer: syz [ 306.510959][ T1561] usb 3-1: SerialNumber: syz [ 306.808477][ T1561] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 306.851261][ T1561] usb 3-1: No valid video chain found. [ 306.876504][ T1561] usb 3-1: selecting invalid altsetting 0 [ 306.910021][ T1561] usb 3-1: selecting invalid altsetting 0 [ 306.919601][ T1561] usbtest: probe of 3-1:220.1 failed with error -22 [ 306.958976][ T1561] usb 3-1: USB disconnect, device number 27 [ 307.279798][ T8845] Cannot find add_set index 0 as target [ 308.496627][ T8862] loop1: detected capacity change from 0 to 512 [ 308.533516][ T8862] EXT4-fs: Ignoring removed i_version option [ 308.612727][ T8862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.676331][ T8862] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.763298][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.342745][ T8901] loop3: detected capacity change from 0 to 16 [ 310.373064][ T8901] erofs: (device loop3): mounted with root inode @ nid 36. [ 310.440075][ T8901] erofs: (device loop3): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 310.501368][ T8901] erofs: (device loop3): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 310.548919][ T8901] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 310.559416][ T8908] erofs: (device loop3): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 310.584291][ T8901] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 310.599080][ T8908] erofs: (device loop3): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 310.619750][ T8908] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 311.065247][ T8914] syz.3.948: attempt to access beyond end of device [ 311.065247][ T8914] loop7: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 311.123678][ T8914] EXT4-fs (loop7): unable to read superblock [ 311.169059][ T8906] loop1: detected capacity change from 0 to 32768 [ 311.231863][ T8906] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 311.428711][ T8918] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 311.519068][ T5897] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 311.872443][ T8926] kvm: kvm [8925]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000005b) [ 312.652350][ T8956] loop4: detected capacity change from 0 to 128 [ 313.566280][ T8972] loop5: detected capacity change from 0 to 7 [ 313.592587][ T8972] Dev loop5: unable to read RDB block 7 [ 313.604555][ T8972] loop5: unable to read partition table [ 313.619396][ T8972] loop5: partition table beyond EOD, truncated [ 313.636744][ T8972] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 313.715473][ T8973] Dev loop5: unable to read RDB block 7 [ 313.751978][ T8973] loop5: unable to read partition table [ 313.758749][ T8973] loop5: partition table beyond EOD, truncated [ 314.652278][ T8987] Zero length message leads to an empty skb [ 314.704500][ T8989] netlink: 36 bytes leftover after parsing attributes in process `syz.4.976'. [ 315.059228][ T8994] Cannot find add_set index 0 as target [ 316.121753][ T8996] kvm: kvm [8995]: vcpu4, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x100000001 [ 317.557283][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.581482][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.103798][ T9017] loop3: detected capacity change from 0 to 256 [ 319.121033][ T9017] exfat: Deprecated parameter 'utf8' [ 319.136869][ T9017] exfat: Deprecated parameter 'utf8' [ 319.183895][ T9017] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 319.785091][ T28] audit: type=1326 audit(2000000450.338:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.4.995" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08a659ce59 code=0x0 [ 319.970870][ T9022] loop1: detected capacity change from 0 to 32768 [ 320.006009][ T9022] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.989 (9022) [ 320.052065][ T9022] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 320.074763][ T9022] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 320.099605][ T9022] BTRFS info (device loop1): setting nodatasum [ 320.126488][ T9022] BTRFS info (device loop1): force zlib compression, level 3 [ 320.137874][ T9022] BTRFS info (device loop1): turning on flush-on-commit [ 320.150697][ T9022] BTRFS info (device loop1): max_inline at 4096 [ 320.177930][ T9022] BTRFS info (device loop1): using free space tree [ 320.327196][ T9022] BTRFS info (device loop1): enabling ssd optimizations [ 320.586788][ T9068] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1001'. [ 320.650338][ T5780] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 320.728217][ T9070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1003'. [ 320.923299][ T5897] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (5897) [ 321.271984][ T9084] erspan0: entered promiscuous mode [ 322.145556][ T9098] Cannot find add_set index 0 as target [ 322.819896][ T9082] loop1: detected capacity change from 0 to 32768 [ 322.889702][ T9082] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1006 (9082) [ 322.948694][ T9082] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 322.993139][ T9082] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 323.018223][ T9082] BTRFS info (device loop1): turning off barriers [ 323.041427][ T9082] BTRFS info (device loop1): turning on async discard [ 323.048549][ T9082] BTRFS info (device loop1): doing ref verification [ 323.056762][ T9082] BTRFS info (device loop1): using free space tree [ 323.171698][ T9082] BTRFS info (device loop1): enabling ssd optimizations [ 323.436121][ T5780] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 323.666176][ T5809] IPVS: starting estimator thread 0... [ 323.825892][ T9124] IPVS: using max 18 ests per chain, 43200 per kthread [ 323.920314][ T5897] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop1 scanned by udevd (5897) [ 326.273663][ T9175] lo speed is unknown, defaulting to 1000 [ 326.276643][ T9173] loop3: detected capacity change from 0 to 1024 [ 326.581290][ T5809] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 326.793703][ T5809] usb 2-1: config 0 has no interfaces? [ 326.813227][ T5809] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 326.842466][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.884057][ T5809] usb 2-1: config 0 descriptor?? [ 327.167518][ T23] usb 2-1: USB disconnect, device number 22 [ 327.917456][ T2902] hfsplus: b-tree write err: -5, ino 25 [ 327.952261][ T2902] hfsplus: b-tree write err: -5, ino 4 [ 327.970352][ T2902] hfsplus: b-tree write err: -5, ino 2 [ 328.026815][ T2902] kworker/u4:7: attempt to access beyond end of device [ 328.026815][ T2902] loop3: rw=1, sector=4168, nr_sectors = 2080 limit=1024 [ 328.082252][ T2902] kworker/u4:7: attempt to access beyond end of device [ 328.082252][ T2902] loop3: rw=1, sector=6248, nr_sectors = 1912 limit=1024 [ 328.114857][ T2902] hfsplus: b-tree write err: -5, ino 26 [ 328.299619][ T5810] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 328.492109][ T5810] usb 3-1: Using ep0 maxpacket: 16 [ 328.517872][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.559458][ T5810] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 328.571940][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.600534][ T5810] usb 3-1: config 0 descriptor?? [ 329.058959][ T5810] mcp2221 0003:04D8:00DD.0022: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 329.100755][ T9211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1045'. [ 329.296832][ T9203] loop3: detected capacity change from 0 to 32768 [ 329.333672][ T9203] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1039 (9203) [ 329.389818][ T9203] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 329.410563][ T9203] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 329.439286][ T9203] BTRFS info (device loop3): setting nodatasum [ 329.472509][ T9203] BTRFS info (device loop3): force zlib compression, level 3 [ 329.500604][ T9203] BTRFS info (device loop3): turning on flush-on-commit [ 329.531690][ T9203] BTRFS info (device loop3): max_inline at 4096 [ 329.538282][ T9203] BTRFS info (device loop3): using free space tree [ 329.549473][ T9207] loop4: detected capacity change from 0 to 32768 [ 329.570765][ T9207] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 329.573715][ T23] usb 3-1: USB disconnect, device number 28 [ 329.752250][ T9203] BTRFS info (device loop3): enabling ssd optimizations [ 329.954560][ T5897] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 330.136425][ T5776] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 330.468452][ T9237] loop4: detected capacity change from 0 to 1024 [ 330.553563][ T5930] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (5930) [ 330.585880][ T9237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.751338][ T1561] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 330.828361][ T7673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.954145][ T1561] usb 3-1: Using ep0 maxpacket: 8 [ 330.984959][ T1561] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 331.008214][ T1561] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 331.027908][ T1561] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.049073][ T1561] usb 3-1: Product: syz [ 331.084297][ T1561] usb 3-1: Manufacturer: syz [ 331.089038][ T1561] usb 3-1: SerialNumber: syz [ 331.135925][ T1561] usb 3-1: config 0 descriptor?? [ 331.165003][ T1561] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 331.184432][ T1561] usb 3-1: setting power ON [ 331.209361][ T1561] dvb-usb: bulk message failed: -22 (2/0) [ 331.249027][ T1561] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 331.289477][ T1561] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 331.311378][ T1561] usb 3-1: media controller created [ 331.382612][ T9239] dvb-usb: bulk message failed: -22 (3/0) [ 331.389152][ T9239] dvb-usb: bulk message failed: -22 (3/0) [ 331.399383][ T1561] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 331.421970][ T9239] dvb-usb: bulk message failed: -22 (4/0) [ 331.429290][ T9239] cxusb: i2c read failed [ 331.455166][ T1561] usb 3-1: selecting invalid altsetting 6 [ 331.464725][ T1561] usb 3-1: digital interface selection failed (-22) [ 331.504910][ T1561] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 331.516675][ T9256] loop1: detected capacity change from 0 to 512 [ 331.526127][ T1561] usb 3-1: setting power OFF [ 331.543946][ T1561] dvb-usb: bulk message failed: -22 (2/0) [ 331.550415][ T1561] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 331.579412][ T1561] (NULL device *): no alternate interface [ 331.697413][ T1561] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 331.718144][ T1561] usb 3-1: USB disconnect, device number 29 [ 331.780056][ T9256] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.1055: corrupted inode contents [ 331.842987][ T9256] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #16: comm syz.1.1055: mark_inode_dirty error [ 331.875820][ T9256] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.1055: corrupted inode contents [ 331.902551][ T9256] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1055: mark_inode_dirty error [ 331.932253][ T9256] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.1055: corrupted inode contents [ 332.006410][ T9256] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 332.059148][ T9256] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.1055: corrupted inode contents [ 332.226421][ T9256] EXT4-fs error (device loop1): ext4_truncate:4301: inode #16: comm syz.1.1055: mark_inode_dirty error [ 332.324131][ T9256] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 332.528261][ T9256] EXT4-fs (loop1): 1 truncate cleaned up [ 332.668314][ T9256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.821847][ T9256] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.834280][ T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 332.901366][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 1 [ 333.118194][ T9274] loop4: detected capacity change from 0 to 512 [ 333.179369][ T9274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.255157][ T9274] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.342991][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.827750][ T7673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.871062][ T9306] loop4: detected capacity change from 0 to 512 [ 334.883827][ T5810] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 334.900186][ T9306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.980112][ T7673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.051900][ T23] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 335.094189][ T5810] usb 3-1: config 0 has an invalid interface number: 5 but max is 0 [ 335.111243][ T5810] usb 3-1: config 0 has no interface number 0 [ 335.117509][ T5810] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 335.132515][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.144468][ T5810] usb 3-1: config 0 descriptor?? [ 335.153375][ T5810] ums-realtek 3-1:0.5: USB Mass Storage device detected [ 335.251834][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 335.267247][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 335.282421][ T9315] loop4: detected capacity change from 0 to 128 [ 335.288904][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 335.314051][ T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 335.331208][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 335.351227][ T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 335.387779][ T23] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 335.410119][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.438074][ T5810] usb 3-1: USB disconnect, device number 30 [ 335.449265][ T23] usb 2-1: config 0 descriptor?? [ 335.468096][ T9303] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 335.481439][ T9315] FAT-fs (loop4): error, corrupted directory (invalid i_start) [ 335.520391][ T9315] FAT-fs (loop4): Filesystem has been set read-only [ 336.645798][ T8] usb 2-1: USB disconnect, device number 23 [ 336.647116][ T5779] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 336.971258][ T5810] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 337.161338][ T5810] usb 5-1: Using ep0 maxpacket: 16 [ 337.170198][ T5810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.211290][ T5810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.239013][ T5810] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 337.281223][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.297785][ T5810] usb 5-1: config 0 descriptor?? [ 337.300792][ T9326] loop3: detected capacity change from 0 to 32768 [ 337.392416][ T9326] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 337.569317][ T9326] XFS (loop3): Ending clean mount [ 337.766170][ T5810] apple 0003:05AC:024B.0023: fixing up MacBook JIS keyboard report descriptor [ 337.795856][ T5810] apple 0003:05AC:024B.0023: unknown global tag 0xe [ 337.814566][ T5810] apple 0003:05AC:024B.0023: item 0 1 1 14 parsing failed [ 337.826979][ T5810] apple 0003:05AC:024B.0023: parse failed [ 337.842923][ T5810] apple: probe of 0003:05AC:024B.0023 failed with error -22 [ 338.010750][ T9342] kvm: kvm [9341]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x80000006 [ 338.079451][ T23] usb 5-1: USB disconnect, device number 7 [ 338.221574][ T5776] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 339.455976][ T9357] loop4: detected capacity change from 0 to 256 [ 339.471767][ T9357] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 339.493561][ T9357] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 339.529212][ T9357] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 339.909505][ T9367] loop3: detected capacity change from 0 to 512 [ 339.964755][ T9367] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 339.989559][ T9367] EXT4-fs (loop3): 1 truncate cleaned up [ 340.022068][ T9367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.124985][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.184084][ T8] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 340.211303][ T23] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 340.300214][ T9377] loop3: detected capacity change from 0 to 1024 [ 340.381439][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 340.406912][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.442136][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 340.443582][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.472335][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.485222][ T23] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 340.513126][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.525017][ T23] usb 5-1: config 0 descriptor?? [ 340.546152][ T9377] hfsplus: request for non-existent node 62977 in B*Tree [ 340.559301][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 340.562702][ T23] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input29 [ 340.588212][ T9377] hfsplus: request for non-existent node 62977 in B*Tree [ 340.601675][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.657105][ T2902] hfsplus: b-tree write err: -5, ino 3 [ 340.674502][ T8] usb 2-1: config 0 descriptor?? [ 340.732192][ T8] hub 2-1:0.0: USB hub found [ 340.828474][ T5124] bcm5974 5-1:0.0: could not read from device [ 340.861078][ T9372] bcm5974 5-1:0.0: could not read from device [ 340.895111][ T5124] bcm5974 5-1:0.0: could not read from device [ 340.921897][ T23] usb 5-1: USB disconnect, device number 8 [ 340.945668][ T8] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 340.964681][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1099'. [ 341.098154][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1100'. [ 341.131324][ T5810] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 341.160179][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 341.176135][ T8] usbhid: probe of 2-1:0.0 failed with error -71 [ 341.184906][ T9386] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1101'. [ 341.232321][ T8] usb 2-1: USB disconnect, device number 24 [ 341.337533][ T5810] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 341.348688][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.358425][ T5810] usb 4-1: Product: syz [ 341.363989][ T5810] usb 4-1: Manufacturer: syz [ 341.368628][ T5810] usb 4-1: SerialNumber: syz [ 341.381403][ T5810] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 341.497757][ T23] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 341.901283][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 341.911427][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 342.081360][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 342.089136][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 342.106132][ T9] usb 3-1: config 0 has no interface number 0 [ 342.114815][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 342.132169][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 342.134028][ T5810] usb 4-1: USB disconnect, device number 31 [ 342.142561][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.142614][ T8] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 342.142639][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.144118][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.144144][ T9] usb 3-1: Product: syz [ 342.144168][ T9] usb 3-1: Manufacturer: syz [ 342.144184][ T9] usb 3-1: SerialNumber: syz [ 342.206290][ T8] usb 5-1: config 0 descriptor?? [ 342.237147][ T9] usb 3-1: config 0 descriptor?? [ 342.258135][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 342.467350][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 342.479890][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 342.601451][ T1561] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 342.654486][ T8] mcp2221 0003:04D8:00DD.0024: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 342.736743][ T9397] loop3: detected capacity change from 0 to 256 [ 342.769418][ T23] usb 4-1: Service connection timeout for: 256 [ 342.784137][ T1561] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 342.801676][ T23] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 342.804656][ T1561] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 342.827593][ T1561] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 342.834991][ T9397] FAT-fs (loop3): Directory bread(block 64) failed [ 342.841760][ T1561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 342.854104][ T23] ath9k_htc: Failed to initialize the device [ 342.887733][ T1561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 342.890450][ T5810] usb 4-1: ath9k_htc: USB layer deinitialized [ 342.907496][ T9397] FAT-fs (loop3): Directory bread(block 65) failed [ 342.918633][ T1561] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 342.928095][ T9397] FAT-fs (loop3): Directory bread(block 66) failed [ 342.928137][ T9397] FAT-fs (loop3): Directory bread(block 67) failed [ 342.928293][ T9397] FAT-fs (loop3): Directory bread(block 68) failed [ 342.928322][ T9397] FAT-fs (loop3): Directory bread(block 69) failed [ 342.928429][ T9397] FAT-fs (loop3): Directory bread(block 70) failed [ 342.928457][ T9397] FAT-fs (loop3): Directory bread(block 71) failed [ 342.928548][ T9397] FAT-fs (loop3): Directory bread(block 72) failed [ 342.982626][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 342.992149][ T9] usb 3-1: USB disconnect, device number 31 [ 343.013243][ T1561] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 343.019025][ T9397] FAT-fs (loop3): Directory bread(block 73) failed [ 343.025060][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 343.041433][ T1561] usb 2-1: Product: syz [ 343.045721][ T1561] usb 2-1: Manufacturer: syz [ 343.065504][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 343.079710][ T1561] cdc_wdm 2-1:1.0: skipping garbage [ 343.086073][ T1561] cdc_wdm 2-1:1.0: skipping garbage [ 343.103881][ T9] quatech2 3-1:0.51: device disconnected [ 343.114593][ T1561] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 343.120728][ T1561] cdc_wdm 2-1:1.0: Unknown control protocol [ 343.212214][ T5811] usb 5-1: USB disconnect, device number 9 [ 343.359442][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 343.366354][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 343.373416][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 343.380155][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 343.386470][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 343.393178][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 343.400108][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 343.406752][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 343.413803][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 343.420480][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 343.427036][ T5809] usb 2-1: USB disconnect, device number 25 [ 343.433131][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 343.433159][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 343.433175][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 343.601520][ T5810] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 343.791501][ T5810] usb 4-1: Using ep0 maxpacket: 32 [ 343.799470][ T5810] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 343.823328][ T5810] usb 4-1: config 0 has no interface number 0 [ 343.836157][ T5810] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 343.870123][ T5810] usb 4-1: config 0 interface 85 has no altsetting 0 [ 343.900086][ T5810] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 343.919281][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.935200][ T5810] usb 4-1: Product: syz [ 343.939439][ T5810] usb 4-1: Manufacturer: syz [ 343.956247][ T5810] usb 4-1: SerialNumber: syz [ 343.970276][ T5810] usb 4-1: config 0 descriptor?? [ 344.385691][ T9403] loop4: detected capacity change from 0 to 32768 [ 344.452637][ T28] audit: type=1800 audit(2000000475.008:19): pid=9403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1109" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 344.512786][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 344.613786][ T5810] appletouch 4-1:0.85: Geyser mode initialized. [ 344.643079][ T5810] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input30 [ 344.721255][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 344.732646][ T9] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 344.751515][ T9] usb 2-1: config 0 has no interface number 0 [ 344.757894][ T9] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 344.839753][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 344.870880][ T9] usb 2-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 344.910622][ T9] usb 2-1: Product: syz [ 344.922348][ T5810] usb 4-1: USB disconnect, device number 32 [ 344.930550][ T9] usb 2-1: config 0 descriptor?? [ 344.962807][ T9] iowarrior 2-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 344.987924][ T5810] appletouch 4-1:0.85: input: appletouch disconnected [ 345.221555][ T5811] usb 2-1: USB disconnect, device number 26 [ 345.227721][ C1] iowarrior 2-1:0.8: iowarrior_callback - usb_submit_urb failed with result -19 [ 345.750087][ T9417] loop3: detected capacity change from 0 to 256 [ 346.793761][ T5811] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 346.821481][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 346.981339][ T5811] usb 4-1: Using ep0 maxpacket: 8 [ 347.020364][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 347.020630][ T5811] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 347.036605][ T8] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 347.048788][ T8] usb 5-1: config 0 has no interface number 0 [ 347.059625][ T8] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 347.062933][ T5811] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 347.078267][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.088623][ T5811] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 347.089566][ T8] usb 5-1: Product: syz [ 347.103243][ T5811] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.103301][ T5811] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 347.103327][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.147540][ T8] usb 5-1: Manufacturer: syz [ 347.152806][ T8] usb 5-1: SerialNumber: syz [ 347.191780][ T8] usb 5-1: config 0 descriptor?? [ 347.228312][ T8] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 347.347426][ T5811] usb 4-1: GET_CAPABILITIES returned 0 [ 347.361263][ T5811] usbtmc 4-1:16.0: can't read capabilities [ 347.478453][ T8] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 347.504884][ T8] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 347.678342][ T9] usb 4-1: USB disconnect, device number 33 [ 348.009277][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 348.017506][ T9] usb 5-1: USB disconnect, device number 10 [ 348.039522][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 348.075047][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 348.102039][ T9] quatech2 5-1:0.51: device disconnected [ 348.128481][ T9440] loop1: detected capacity change from 0 to 32768 [ 348.178132][ T9440] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 348.350781][ T9440] XFS (loop1): Ending clean mount [ 348.591677][ T5780] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 349.420045][ T9472] loop4: detected capacity change from 0 to 1024 [ 349.424207][ T9471] loop1: detected capacity change from 0 to 256 [ 349.554311][ T9472] hfsplus: request for non-existent node 62977 in B*Tree [ 349.568313][ T9472] hfsplus: request for non-existent node 62977 in B*Tree [ 349.716763][ T1133] hfsplus: b-tree write err: -5, ino 3 [ 350.261376][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 350.361229][ T5810] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 350.442017][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 350.444346][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 350.444380][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.451059][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 350.451078][ T9] pvrusb2: ********** [ 350.451086][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 350.451272][ T9] pvrusb2: Important functionality might not be entirely working. [ 350.451284][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 350.451296][ T9] pvrusb2: ********** [ 350.471292][ T1561] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 350.553821][ T5810] usb 2-1: Using ep0 maxpacket: 16 [ 350.574576][ T5810] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.574635][ T5810] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 350.574662][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.577334][ T5810] usb 2-1: config 0 descriptor?? [ 350.588247][ T5810] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input31 [ 350.651689][ T1561] usb 3-1: Using ep0 maxpacket: 32 [ 350.654214][ T1561] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.654248][ T1561] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.654326][ T1561] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 350.654351][ T1561] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.664613][ T1561] usb 3-1: config 0 descriptor?? [ 350.668222][ T1561] hub 3-1:0.0: USB hub found [ 350.700390][ T2319] pvrusb2: Invalid write control endpoint [ 350.793183][ T2319] pvrusb2: Invalid write control endpoint [ 350.842522][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 350.842593][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 350.842603][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 350.842647][ T2319] pvrusb2: Device being rendered inoperable [ 350.842733][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 350.842854][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 350.846635][ T2319] pvrusb2: Attached sub-driver cx25840 [ 350.846719][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 350.846730][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 350.882733][ T5124] bcm5974 2-1:0.0: could not read from device [ 350.886814][ T5810] usb 2-1: USB disconnect, device number 27 [ 350.903490][ T1561] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 350.943599][ T5809] usb 4-1: USB disconnect, device number 34 [ 351.117335][ T1561] usbhid 3-1:0.0: can't add hid device: -71 [ 351.117450][ T1561] usbhid: probe of 3-1:0.0 failed with error -71 [ 351.142141][ T1561] usb 3-1: USB disconnect, device number 32 [ 351.630542][ T9498] loop3: detected capacity change from 0 to 512 [ 351.676613][ T9498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.677893][ T9496] loop1: detected capacity change from 0 to 2048 [ 351.748474][ T9498] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.153220][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.491426][ T5810] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 353.691409][ T5810] usb 4-1: Using ep0 maxpacket: 8 [ 353.708287][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 353.730178][ T5810] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 353.761456][ T5810] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 353.791517][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.817541][ T5810] usb 4-1: config 0 descriptor?? [ 353.889283][ T9513] loop4: detected capacity change from 0 to 32768 [ 353.975160][ T9513] JBD2: Ignoring recovery information on journal [ 354.256071][ T5810] saitek 0003:06A3:0621.0025: unexpected long global item [ 354.273933][ T9513] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 354.446212][ T5810] saitek 0003:06A3:0621.0025: parse failed [ 354.452873][ T5810] saitek: probe of 0003:06A3:0621.0025 failed with error -22 [ 355.079524][ T1561] usb 4-1: USB disconnect, device number 35 [ 355.382150][ T7673] ocfs2: Unmounting device (7,4) on (node local) [ 355.851374][ T1561] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 356.045800][ T9544] loop4: detected capacity change from 0 to 2048 [ 356.051227][ T1561] usb 2-1: Using ep0 maxpacket: 8 [ 356.070424][ T1561] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 356.101246][ T1561] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 356.151445][ T1561] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.212419][ T1561] usb 2-1: config 0 descriptor?? [ 356.304618][ T9548] loop3: detected capacity change from 0 to 1024 [ 356.477979][ T1561] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 356.902371][ T9558] loop3: detected capacity change from 0 to 128 [ 356.932063][ T9558] FAT-fs (loop3): Unrecognized mount option "defcontext=system_u" or missing value [ 356.963298][ T1561] usb 2-1: USB disconnect, device number 28 [ 357.281478][ T8] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 357.500672][ T8] usb 4-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 357.533571][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.563041][ T8] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 357.581757][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 357.594695][ T8] usb 4-1: SerialNumber: syz [ 357.865919][ T8] usb 4-1: 0:2 : does not exist [ 357.881779][ T8] usb 4-1: unit 105 not found! [ 357.896888][ T8] usb 4-1: unit 120 not found! [ 357.911770][ T8] usb 4-1: unit 101 not found! [ 357.991950][ T8] usb 4-1: USB disconnect, device number 36 [ 358.056636][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.473937][ T9585] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 358.658951][ T9587] loop3: detected capacity change from 0 to 512 [ 358.808252][ T9581] loop1: detected capacity change from 0 to 32768 [ 358.853033][ T9587] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 358.887640][ T9587] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 358.919935][ T28] audit: type=1800 audit(2000000489.468:20): pid=9581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1178" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 358.920070][ T9587] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1180: Corrupt directory, running e2fsck is recommended [ 358.978939][ T9587] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 359.028993][ T9587] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.1180: corrupted in-inode xattr: e_name out of bounds [ 359.078718][ T9587] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1180: couldn't read orphan inode 15 (err -117) [ 359.087920][ T5811] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 359.144398][ T9587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.341371][ T5811] usb 5-1: Using ep0 maxpacket: 8 [ 359.352935][ T9587] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 359.376370][ T5811] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 359.397933][ T5811] usb 5-1: config 0 has no interface number 0 [ 359.411349][ T9587] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 359.431344][ T5811] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 359.453505][ T9587] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1180: Corrupt directory, running e2fsck is recommended [ 359.487289][ T5811] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 359.516586][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 359.516800][ T9587] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 359.535115][ T5811] usb 5-1: Product: syz [ 359.551435][ T9587] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 359.564571][ T5811] usb 5-1: config 0 descriptor?? [ 359.581665][ T9587] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1180: Corrupt directory, running e2fsck is recommended [ 359.605666][ T5811] iowarrior 5-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 359.640488][ T9596] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 359.721919][ T9596] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 359.765578][ T9596] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1180: Corrupt directory, running e2fsck is recommended [ 359.908456][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.072512][ T9602] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 360.113374][ T9] usb 5-1: USB disconnect, device number 11 [ 360.113461][ C0] iowarrior 5-1:0.8: iowarrior_callback - usb_submit_urb failed with result -19 [ 360.346831][ T5811] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 360.364007][ T9604] syz.3.1187 uses obsolete (PF_INET,SOCK_PACKET) [ 360.587386][ T5811] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 360.595853][ T5811] usb 2-1: config 0 has no interface number 0 [ 360.602164][ T5811] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 360.621191][ T5811] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 360.643621][ T5811] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 360.653100][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 360.671537][ T5811] usb 2-1: Product: syz [ 360.675948][ T5811] usb 2-1: SerialNumber: syz [ 360.695777][ T9606] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1188'. [ 360.695959][ T5811] usb 2-1: config 0 descriptor?? [ 360.735084][ T5811] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 360.746704][ T5811] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input32 [ 361.003151][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 361.170808][ T9611] loop4: detected capacity change from 0 to 512 [ 361.188369][ T9611] EXT4-fs: Ignoring removed i_version option [ 361.631845][ T9611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.638530][ T9611] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.139155][ T7673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.345015][ T9620] tipc: Started in network mode [ 362.345055][ T9620] tipc: Node identity ac1414aa, cluster identity 4711 [ 362.359405][ T9620] tipc: Enabled bearer , priority 10 [ 363.055313][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 363.055484][ T1561] usb 2-1: USB disconnect, device number 29 [ 363.062424][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 363.133219][ T1561] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 363.473516][ T9] tipc: Node number set to 2886997162 [ 363.878533][ T9637] syz_tun: entered allmulticast mode [ 364.066583][ T9625] loop3: detected capacity change from 0 to 32768 [ 364.122947][ T9625] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1194 (9625) [ 364.143227][ T9641] input: syz1 as /devices/virtual/input/input33 [ 364.160665][ T9625] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 364.187259][ T9625] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 364.254986][ T9625] BTRFS info (device loop3): using free space tree [ 364.521884][ T9625] BTRFS info (device loop3): enabling ssd optimizations [ 364.562775][ T9625] BTRFS info (device loop3): auto enabling async discard [ 364.931909][ T5776] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 365.029121][ T9670] loop1: detected capacity change from 0 to 512 [ 365.070422][ T9670] EXT4-fs: Ignoring removed bh option [ 365.127491][ T9670] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 365.285372][ T9578] Set syz1 is full, maxelem 65536 reached [ 365.289302][ T9670] EXT4-fs (loop1): 1 truncate cleaned up [ 365.343956][ T9670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.525270][ T9672] loop4: detected capacity change from 0 to 4096 [ 365.603903][ T9672] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 366.049680][ T9672] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 366.382576][ T9672] ntfs: (device loop4): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 366.482087][ T9672] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 366.557020][ T9672] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 366.601274][ T9672] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 366.625685][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.677305][ T9672] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 366.705236][ T9672] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 366.785076][ T9672] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 366.849855][ T9672] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 366.926179][ T9691] loop1: detected capacity change from 0 to 512 [ 366.962261][ T9672] ntfs: volume version 3.1. [ 367.012374][ T9691] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 367.075955][ T9691] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 367.090570][ T9691] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1215: Corrupt directory, running e2fsck is recommended [ 367.120173][ T9691] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 367.129359][ T9691] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.1215: corrupted in-inode xattr: e_name out of bounds [ 367.148813][ T9691] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1215: couldn't read orphan inode 15 (err -117) [ 367.184319][ T9691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.295148][ T9691] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 367.359138][ T9691] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 367.399386][ T9691] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1215: Corrupt directory, running e2fsck is recommended [ 367.448168][ T9684] loop3: detected capacity change from 0 to 32768 [ 367.457269][ T9699] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 367.478804][ T9684] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1213 (9684) [ 367.491307][ T9699] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 367.502619][ T9699] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1215: Corrupt directory, running e2fsck is recommended [ 367.518143][ T9697] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 367.537012][ T9697] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 367.562513][ T9684] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 367.571863][ T9697] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1215: Corrupt directory, running e2fsck is recommended [ 367.585217][ T9684] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 367.599315][ T9684] BTRFS info (device loop3): using free space tree [ 367.718915][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.828580][ T9684] BTRFS info (device loop3): enabling ssd optimizations [ 367.840422][ T9684] BTRFS info (device loop3): auto enabling async discard [ 367.890591][ T9720] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1220'. [ 368.034323][ T5776] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 368.369539][ T5897] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop3 scanned by udevd (5897) [ 368.559747][ T9700] loop4: detected capacity change from 0 to 32768 [ 368.616188][ T9700] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1218 (9700) [ 368.711080][ T9700] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 368.748421][ T9700] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 368.783516][ T9700] BTRFS info (device loop4): setting nodatasum [ 368.800668][ T9700] BTRFS info (device loop4): max_inline at 0 [ 368.861180][ T9700] BTRFS info (device loop4): using free space tree [ 369.011536][ T9700] BTRFS info (device loop4): enabling ssd optimizations [ 369.052330][ T9700] BTRFS info (device loop4): auto enabling async discard [ 369.189822][ T9757] loop3: detected capacity change from 0 to 512 [ 369.211612][ T9757] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 369.263293][ T9757] EXT4-fs (loop3): 1 truncate cleaned up [ 369.290021][ T9757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.335115][ T7673] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 369.370616][ T9753] loop1: detected capacity change from 0 to 8192 [ 369.395511][ T9753] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 369.441611][ T9753] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 369.468457][ T9753] REISERFS (device loop1): using ordered data mode [ 369.494536][ T9753] reiserfs: using flush barriers [ 369.539208][ T9753] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 369.588022][ T9753] REISERFS (device loop1): checking transaction log (loop1) [ 369.643553][ T9753] REISERFS (device loop1): Using r5 hash to sort names [ 369.681983][ T9753] REISERFS (device loop1): using 3.5.x disk format [ 369.688971][ T9753] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 369.733622][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.795280][ T5897] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (5897) [ 369.928982][ T9768] loop3: detected capacity change from 0 to 256 [ 370.390213][ T9772] loop1: detected capacity change from 0 to 512 [ 370.485549][ T9774] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1232'. [ 370.827743][ T9777] loop1: detected capacity change from 0 to 256 [ 370.846861][ T9777] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 370.891222][ T9777] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 370.967245][ T9777] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 371.712912][ T9785] loop1: detected capacity change from 0 to 128 [ 371.779888][ T9785] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 371.879157][ T9785] ext4 filesystem being mounted at /311/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 371.911262][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.934923][ T9783] loop4: detected capacity change from 0 to 32768 [ 371.962209][ T9783] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 372.000444][ T9785] EXT4-fs error (device loop1): dx_make_map:1328: inode #2: block 18: comm syz.1.1237: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 372.087150][ T9785] EXT4-fs (loop1): Remounting filesystem read-only [ 372.189751][ T5930] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 372.192000][ T9779] loop3: detected capacity change from 0 to 32768 [ 372.235056][ T5780] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 372.282493][ T9779] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 372.333985][ T9779] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 372.378991][ T9779] BTRFS info (device loop3): using free space tree [ 372.524354][ T9779] BTRFS info (device loop3): enabling ssd optimizations [ 372.541234][ T9779] BTRFS info (device loop3): auto enabling async discard [ 372.711305][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 372.901652][ T5776] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 372.964839][ T9] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 373.050381][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 373.197515][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 373.529216][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 373.578364][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 373.640984][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 373.721547][ T9815] loop4: detected capacity change from 0 to 64 [ 373.727921][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 373.780019][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 373.827122][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 373.895168][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 373.916172][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 373.945842][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 373.962172][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 373.970831][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 374.009042][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 374.021067][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 374.035242][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 374.046343][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 374.085852][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 374.102614][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 374.121199][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 374.147793][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 374.177557][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 374.212816][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 374.244644][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 374.277919][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 374.311224][ T9] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 374.351557][ T9] usb 3-1: Product: syz [ 374.355887][ T9] usb 3-1: Manufacturer: syz [ 374.360980][ T9] usb 3-1: SerialNumber: syz [ 374.422332][ T9] usb 3-1: config 0 descriptor?? [ 374.473245][ T9] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 374.907664][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 374.919489][ T9838] loop4: detected capacity change from 0 to 4096 [ 374.920161][ T9] usb 3-1: USB disconnect, device number 33 [ 374.936147][ T9839] yurex 3-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 374.942884][ T9838] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 374.963438][ T9] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 375.068565][ T9838] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 376.458756][ T9860] loop3: detected capacity change from 0 to 16 [ 376.493584][ T9860] erofs: (device loop3): mounted with root inode @ nid 36. [ 376.536900][ T9860] syz.3.1254: attempt to access beyond end of device [ 376.536900][ T9860] loop3: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 376.615724][ T9867] loop1: detected capacity change from 0 to 256 [ 376.631991][ T9860] syz.3.1254: attempt to access beyond end of device [ 376.631991][ T9860] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 376.683577][ T9867] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 376.737117][ T9860] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 376.761249][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 376.761268][ T28] audit: type=1800 audit(2000000507.308:21): pid=9860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1254" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 376.898727][ T28] audit: type=1800 audit(2000000507.408:22): pid=9867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1255" name="file2" dev="loop1" ino=1048641 res=0 errno=0 [ 377.144724][ T9871] loop1: detected capacity change from 0 to 2048 [ 377.189370][ T9871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 377.430428][ T9881] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #12: comm syz.1.1256: corrupted in-inode xattr: e_value size too large [ 377.483115][ T9880] kAFS: No cell specified [ 378.348577][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 379.000543][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.014080][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.536466][ T9894] kAFS: No cell specified [ 380.393528][ T9902] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 380.715447][ T9898] loop3: detected capacity change from 0 to 32768 [ 380.851454][ T9898] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 380.920713][ T9914] loop4: detected capacity change from 0 to 164 [ 381.061530][ T9898] XFS (loop3): Ending clean mount [ 381.242112][ T9898] XFS (loop3): User initiated shutdown received. [ 381.270867][ T9898] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 381.315451][ T9898] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 381.485207][ T5776] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 381.672724][ T9904] loop1: detected capacity change from 0 to 40427 [ 381.713282][ T9904] F2FS-fs (loop1): invalid crc value [ 381.749073][ T9904] F2FS-fs (loop1): Found nat_bits in checkpoint [ 381.914695][ T9904] F2FS-fs (loop1): Start checkpoint disabled! [ 381.965062][ T9904] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 382.228294][ T9937] kAFS: No cell specified [ 382.991471][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 383.160645][ T9942] loop4: detected capacity change from 0 to 1024 [ 383.209833][ T9942] EXT4-fs: Ignoring removed bh option [ 383.224268][ T9942] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 383.257757][ T2938] kworker/u4:9: attempt to access beyond end of device [ 383.257757][ T2938] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 383.318496][ T9942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.346816][ T2938] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 383.389112][ T2938] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 383.548149][ T9948] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #12: block 7: comm syz.4.1277: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 383.644360][ T9948] EXT4-fs (loop4): Remounting filesystem read-only [ 383.714022][ T9950] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 383.723974][ T9950] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 383.924412][ T9940] loop3: detected capacity change from 0 to 32768 [ 384.046606][ T9940] read_mapping_page failed! [ 384.071420][ T9940] ERROR: (device loop3): txCommit: [ 384.071420][ T9940] [ 384.154604][ T112] ERROR: (device loop3): diUpdatePMap: the inode is not allocated in the working map [ 384.154604][ T112] [ 384.240120][ T7673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.311354][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 384.370206][ T9959] loop3: detected capacity change from 0 to 1024 [ 384.452303][ T9959] syz.3.1284: attempt to access beyond end of device [ 384.452303][ T9959] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 384.500955][ T9959] syz.3.1284: attempt to access beyond end of device [ 384.500955][ T9959] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 384.528667][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 384.541225][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.554385][ T9959] buffer_io_error: 138 callbacks suppressed [ 384.554401][ T9959] Buffer I/O error on dev loop3, logical block 2889, async page read [ 384.572567][ T9] usb 2-1: config 0 descriptor?? [ 384.601322][ T28] audit: type=1800 audit(2000000515.138:23): pid=9959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1284" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 384.604785][ T9958] syz.3.1284: attempt to access beyond end of device [ 384.604785][ T9958] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 384.636976][ T9] cp210x 2-1:0.0: cp210x converter detected [ 384.987648][ T9] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 385.024737][ T9] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 385.059396][ T9] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 385.083915][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 385.132845][ T9] usb 2-1: USB disconnect, device number 30 [ 385.179434][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 385.256784][ T9] cp210x 2-1:0.0: device disconnected [ 385.380017][ T9967] kAFS: No cell specified [ 385.444805][ T9963] loop3: detected capacity change from 0 to 4096 [ 385.541853][ T9968] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 386.459553][ T9974] loop3: detected capacity change from 0 to 512 [ 386.477525][ T9974] EXT4-fs: Ignoring removed orlov option [ 386.558019][ T9974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.602485][ T9974] ext4 filesystem being mounted at /328/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 386.603363][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 386.644392][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 386.656210][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 386.673944][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 386.685733][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 386.694452][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 386.766588][ T9977] lo speed is unknown, defaulting to 1000 [ 386.972640][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.137846][ T9985] loop1: detected capacity change from 0 to 512 [ 387.197191][ T9985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.230966][ T9985] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.308011][ T28] audit: type=1800 audit(2000000517.858:24): pid=9985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1295" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 387.378900][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.540306][ T9992] loop1: detected capacity change from 0 to 512 [ 387.602560][ T9992] EXT4-fs: Ignoring removed i_version option [ 387.710800][ T9992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.854089][ T9989] loop3: detected capacity change from 0 to 32768 [ 387.892670][ T9977] chnl_net:caif_netlink_parms(): no params data found [ 387.933074][ T9989] [ 387.933074][ T9989] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 387.933074][ T9989] [ 387.999862][ T9989] ERROR: (device loop3): diWrite: ixpxd invalid [ 387.999862][ T9989] [ 388.034143][ T9989] ERROR: (device loop3): txCommit: [ 388.034143][ T9989] [ 388.062951][ T9977] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.070353][ T9977] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.079090][ T9977] bridge_slave_0: entered allmulticast mode [ 388.092656][ T9977] bridge_slave_0: entered promiscuous mode [ 388.109908][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.116181][ T9989] [ 388.116181][ T9989] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 388.116181][ T9989] [ 388.125601][ T9977] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.137452][ T9977] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.153297][ T9977] bridge_slave_1: entered allmulticast mode [ 388.168380][ T9977] bridge_slave_1: entered promiscuous mode [ 388.171697][ T9989] [ 388.171697][ T9989] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 388.171697][ T9989] [ 388.175965][T10000] ERROR: (device loop3): diWrite: ixpxd invalid [ 388.175965][T10000] [ 388.231784][ T9977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.245015][ T9977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.262797][T10000] ERROR: (device loop3): txCommit: [ 388.262797][T10000] [ 388.315745][T10000] [ 388.315745][T10000] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 388.315745][T10000] [ 388.366528][ T9977] team0: Port device team_slave_0 added [ 388.392564][ T9977] team0: Port device team_slave_1 added [ 388.480250][ T9977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.501198][ T9977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.551074][ T5776] [ 388.551074][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 388.551074][ T5776] [ 388.569502][ T9977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.571790][ T9977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.587821][T10004] input: syz0 as /devices/virtual/input/input34 [ 388.621178][ T9977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.636352][ T5776] [ 388.636352][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 388.636352][ T5776] [ 388.672466][ T9977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.754169][ T51] Bluetooth: hci0: command tx timeout [ 388.948794][ T9977] hsr_slave_0: entered promiscuous mode [ 388.992159][ T9977] hsr_slave_1: entered promiscuous mode [ 389.018578][ T9977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.057665][ T9977] Cannot create hsr debugfs directory [ 390.070478][T10017] input: syz0 as /devices/virtual/input/input35 [ 390.090649][T10014] netlink: 'syz.3.1299': attribute type 3 has an invalid length. [ 390.627984][ T9977] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 390.680494][ T9977] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 390.724804][ T9977] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 390.844495][ T51] Bluetooth: hci0: command tx timeout [ 390.875360][T10030] kAFS: No cell specified [ 391.012733][T10032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.183150][ T9977] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 391.591021][T10037] loop3: detected capacity change from 0 to 512 [ 391.725312][T10037] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 391.795439][T10037] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c098, mo2=0002] [ 391.807962][T10037] System zones: 0-2, 18-18, 34-35 [ 391.889965][T10037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.961729][T10037] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.028358][ T9977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.142496][ T9977] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.189659][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.197102][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.258273][ T200] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.265639][ T200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.410383][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.856179][T10062] input: syz0 as /devices/virtual/input/input36 [ 392.912388][ T51] Bluetooth: hci0: command tx timeout [ 393.248000][ T9977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.288341][T10070] kAFS: No cell specified [ 393.454638][T10075] tipc: Started in network mode [ 393.528024][T10075] tipc: Node identity ac14140f, cluster identity 4711 [ 393.640777][T10075] tipc: New replicast peer: 255.255.255.255 [ 393.793718][T10075] tipc: Enabled bearer , priority 10 [ 394.105608][T10080] kAFS: No cell specified [ 394.877878][ T787] tipc: Node number set to 2886997007 [ 394.992943][ T51] Bluetooth: hci0: command tx timeout [ 395.597664][ T9977] veth0_vlan: entered promiscuous mode [ 395.646976][ T9977] veth1_vlan: entered promiscuous mode [ 395.804445][ T9977] veth0_macvtap: entered promiscuous mode [ 395.920387][T10112] kAFS: No cell specified [ 395.948004][ T9977] veth1_macvtap: entered promiscuous mode [ 396.642915][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.653514][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.663982][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.676037][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.719159][T10114] afs: Unknown parameter 'dy' [ 396.725618][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.747225][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.759461][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.791175][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.864455][ T9977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.898667][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.927949][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.946479][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.961268][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.971875][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.982986][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.004642][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.024716][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.061764][ T9977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.088769][ T9977] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.125535][ T9977] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.147429][ T9977] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.156600][ T9977] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.343891][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.354909][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.431398][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 397.460721][ T200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.477174][ T200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.643453][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.665153][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.687376][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 397.727383][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 397.748778][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.760605][T10128] loop5: detected capacity change from 0 to 512 [ 397.772381][ T9] usb 4-1: config 0 descriptor?? [ 397.799563][T10128] EXT4-fs: Ignoring removed nobh option [ 397.829529][T10128] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 397.865768][T10128] EXT4-fs (loop5): 1 truncate cleaned up [ 397.874653][T10128] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.986207][T10132] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1339'. [ 398.073744][ T9977] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.238817][ T9] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 398.315284][ T9] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 398.526046][T10141] afs: Unknown parameter 'dy' [ 399.289736][ T5812] usb 4-1: USB disconnect, device number 37 [ 400.774888][T10162] loop1: detected capacity change from 0 to 512 [ 400.799121][T10162] EXT4-fs: Ignoring removed nobh option [ 400.829881][T10162] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 400.906928][T10162] EXT4-fs (loop1): 1 truncate cleaned up [ 400.920444][T10162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.969430][T10166] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1350'. [ 400.988389][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.382210][T10176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1354'. [ 402.465127][ T5812] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 402.680445][ T5812] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 402.712577][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.760552][ T5812] usb 4-1: config 0 descriptor?? [ 402.776084][ T5812] cp210x 4-1:0.0: cp210x converter detected [ 402.798555][T10192] syzkaller1: entered promiscuous mode [ 402.805825][T10192] syzkaller1: entered allmulticast mode [ 402.835134][T10194] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1364'. [ 403.204602][ T5812] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 403.218738][ T5812] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 403.227631][ T5812] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 403.254223][ T5812] usb 4-1: cp210x converter now attached to ttyUSB0 [ 403.274975][ T5812] usb 4-1: USB disconnect, device number 38 [ 403.303587][ T5812] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 403.331917][ T5812] cp210x 4-1:0.0: device disconnected [ 404.895043][T10223] loop3: detected capacity change from 0 to 256 [ 404.910056][T10223] exfat: Deprecated parameter 'utf8' [ 404.935117][T10223] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 407.332692][T10252] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1386'. [ 407.789274][T10233] loop5: detected capacity change from 0 to 40427 [ 407.802201][T10263] smc: net device vcan0 applied user defined pnetid SYZ1 [ 407.813842][T10263] smc: net device vcan0 erased user defined pnetid SYZ1 [ 407.832826][T10233] F2FS-fs (loop5): invalid crc value [ 407.868306][T10233] F2FS-fs (loop5): Found nat_bits in checkpoint [ 408.043948][T10233] F2FS-fs (loop5): Start checkpoint disabled! [ 408.057471][T10268] loop1: detected capacity change from 0 to 512 [ 408.076079][T10233] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 408.187437][T10268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.234519][T10268] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.262019][T10268] EXT4-fs (loop1): shut down requested (0) [ 408.505369][ T49] kworker/u4:3: attempt to access beyond end of device [ 408.505369][ T49] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 408.521733][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.533159][ T49] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 408.565899][ T49] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 408.591243][ T49] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 409.412361][T10288] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1398'. [ 409.797310][T10295] syzkaller1: entered promiscuous mode [ 409.808233][T10295] syzkaller1: entered allmulticast mode [ 411.131445][ T5811] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 411.171745][T10314] loop5: detected capacity change from 0 to 4096 [ 411.240614][T10317] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 411.274311][ T5809] IPVS: starting estimator thread 0... [ 411.280180][T10316] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 411.345253][ T5811] usb 3-1: Using ep0 maxpacket: 8 [ 411.353183][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 411.392162][T10319] IPVS: using max 16 ests per chain, 38400 per kthread [ 411.399207][ T5811] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 411.431252][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.502350][ T5811] usb 3-1: config 0 descriptor?? [ 411.530112][T10321] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1409'. [ 411.619674][T10323] syzkaller1: entered promiscuous mode [ 411.641243][T10323] syzkaller1: entered allmulticast mode [ 411.773323][ T5811] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 412.305095][ T9] usb 3-1: USB disconnect, device number 34 [ 413.386146][T10341] loop5: detected capacity change from 0 to 32768 [ 413.517211][T10341] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 413.636873][T10341] XFS (loop5): Ending clean mount [ 413.750322][T10370] syzkaller1: entered promiscuous mode [ 413.774281][T10370] syzkaller1: entered allmulticast mode [ 413.881250][ T5810] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 413.971587][ T9977] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 414.113389][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 414.139592][ T5810] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 414.191434][ T5810] usb 3-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 414.200599][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.239494][ T5810] usb 3-1: config 0 descriptor?? [ 414.491231][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 414.557293][T10369] loop1: detected capacity change from 0 to 40427 [ 414.588386][T10369] F2FS-fs (loop1): invalid crc value [ 414.624416][T10369] F2FS-fs (loop1): Found nat_bits in checkpoint [ 414.708641][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 414.738135][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.740222][T10369] F2FS-fs (loop1): Start checkpoint disabled! [ 414.886343][ T9] usb 4-1: config 0 descriptor?? [ 414.912070][T10369] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 415.110759][ T9] cp210x 4-1:0.0: cp210x converter detected [ 415.530919][ T5810] wacom 0003:056A:00F4.0027: unknown main item tag 0x0 [ 415.538130][ T5810] wacom 0003:056A:00F4.0027: unknown main item tag 0x0 [ 415.548128][ T5810] wacom 0003:056A:00F4.0027: unknown main item tag 0x0 [ 415.561299][ T5810] wacom 0003:056A:00F4.0027: unknown main item tag 0x0 [ 415.568536][ T5810] wacom 0003:056A:00F4.0027: unknown main item tag 0x0 [ 415.597500][ T5810] wacom 0003:056A:00F4.0027: unknown main item tag 0x0 [ 415.618203][ T5810] wacom 0003:056A:00F4.0027: unknown main item tag 0x0 [ 415.636207][ T5810] wacom 0003:056A:00F4.0027: unknown main item tag 0x0 [ 415.671233][ T5810] wacom 0003:056A:00F4.0027: unknown main item tag 0x0 [ 415.678284][ T5810] wacom 0003:056A:00F4.0027: unknown main item tag 0x0 [ 415.721298][ T5810] wacom 0003:056A:00F4.0027: unknown main item tag 0x0 [ 415.728873][ T5810] wacom 0003:056A:00F4.0027: unknown main item tag 0x0 [ 415.732948][ T9] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 415.759865][ T9] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 415.774777][ T5810] wacom 0003:056A:00F4.0027: unknown main item tag 0x0 [ 415.788377][ T5810] wacom 0003:056A:00F4.0027: unknown main item tag 0x0 [ 415.795552][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 415.802484][ T9] usb 4-1: USB disconnect, device number 39 [ 415.821666][ T5810] wacom 0003:056A:00F4.0027: unknown main item tag 0x0 [ 415.828798][ T5810] wacom 0003:056A:00F4.0027: unknown main item tag 0x0 [ 415.859787][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 415.991224][ T9] cp210x 4-1:0.0: device disconnected [ 416.116412][ T5810] wacom 0003:056A:00F4.0027: hidraw0: USB HID v0.08 Device [HID 056a:00f4] on usb-dummy_hcd.2-1/input0 [ 416.138349][ T5810] usb 3-1: USB disconnect, device number 35 [ 416.728454][ T200] kworker/u4:5: attempt to access beyond end of device [ 416.728454][ T200] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 416.753785][ T200] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 416.760941][ T200] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 416.772278][ T200] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 416.808015][T10388] fido_id[10388]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 418.107703][T10401] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1437'. [ 418.280166][T10406] loop5: detected capacity change from 0 to 128 [ 418.582796][T10391] loop3: detected capacity change from 0 to 32768 [ 418.621002][T10412] netlink: 'syz.5.1441': attribute type 21 has an invalid length. [ 418.629539][T10412] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1441'. [ 418.665627][T10412] netlink: 'syz.5.1441': attribute type 5 has an invalid length. [ 418.680551][T10391] JBD2: Ignoring recovery information on journal [ 418.694029][T10412] netlink: 'syz.5.1441': attribute type 6 has an invalid length. [ 418.703014][T10412] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1441'. [ 418.775790][T10391] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 418.823319][T10412] netlink: 'syz.5.1441': attribute type 21 has an invalid length. [ 418.851926][T10412] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1441'. [ 418.876736][T10412] netlink: 'syz.5.1441': attribute type 5 has an invalid length. [ 418.948636][T10412] netlink: 'syz.5.1441': attribute type 6 has an invalid length. [ 418.982488][T10412] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1441'. [ 419.430814][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 421.742982][T10446] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 422.628525][T10444] loop1: detected capacity change from 0 to 32768 [ 422.781431][T10444] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 422.982620][T10444] XFS (loop1): Ending clean mount [ 423.051210][ T5811] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 423.093994][T10444] XFS (loop1): Quotacheck needed: Please wait. [ 423.231040][T10444] XFS (loop1): Quotacheck: Done. [ 423.253324][ T5811] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.267134][ T5811] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 423.289546][ T5811] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 423.309287][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 423.328271][ T5811] usb 3-1: SerialNumber: syz [ 423.372468][ T28] audit: type=1800 audit(2000000553.918:25): pid=10444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1449" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 423.451171][ T28] audit: type=1800 audit(2000000553.928:26): pid=10444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1449" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 423.518934][T10488] tap0: tun_chr_ioctl cmd 2147767506 [ 423.557790][ T5780] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 423.558585][ T5811] usb 3-1: 0:2 : does not exist [ 423.607707][ T5811] usb 3-1: USB disconnect, device number 36 [ 424.123856][T10498] loop3: detected capacity change from 0 to 2048 [ 424.238482][T10500] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 424.325721][T10500] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 424.379105][T10500] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 424.425136][T10500] Remounting filesystem read-only [ 424.562688][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1476'. [ 424.582930][ T5776] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 424.601459][ T5776] NILFS (loop3): discard dirty page: offset=0, ino=18 [ 424.608309][ T5776] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 424.663321][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 424.694356][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 424.711667][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 424.720996][ T5776] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 424.741631][ T5776] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 424.749237][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 424.763410][T10514] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 424.769040][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 424.784198][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 424.798858][ T5776] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 424.806341][ T5776] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 424.817440][ T5776] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 424.825908][ T5776] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 424.843035][ T5776] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 424.850559][ T5776] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 424.859223][ T5776] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 424.867110][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 424.887232][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 424.957368][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 424.970241][ T5776] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 424.992753][ T5776] NILFS (loop3): discard dirty page: offset=0, ino=19 [ 425.000150][ T5776] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 425.016413][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 425.027220][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 425.043822][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 425.059288][ T5776] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 425.098794][ T5776] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 425.107808][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 425.124998][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 425.147074][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 425.172447][ T5776] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 425.179214][ T5776] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 425.199084][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 425.223458][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 425.237209][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 425.247838][ T5776] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 425.261130][ T5776] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 425.269881][ T5776] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 425.286418][ T5776] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 425.307305][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 425.316776][ T5776] NILFS (loop3): discard dirty page: offset=65536, ino=3 [ 425.332420][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 425.347922][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 425.372549][ T5776] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 425.392460][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 425.409971][ T5776] NILFS (loop3): discard dirty page: offset=98304, ino=3 [ 425.410125][T10527] syzkaller1: entered promiscuous mode [ 425.417534][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 425.439074][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 425.443049][T10527] syzkaller1: entered allmulticast mode [ 425.449386][ T5776] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 425.474658][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 425.490075][ T5776] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 425.498615][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 425.515795][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 425.526527][ T5776] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 425.539141][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 426.957564][T10546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 427.097953][T10551] loop3: detected capacity change from 0 to 2048 [ 427.165713][T10551] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 427.216459][T10551] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 429.349257][T10591] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1512'. [ 429.381837][T10591] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1512'. [ 430.796250][T10613] loop5: detected capacity change from 0 to 512 [ 430.843307][T10613] EXT4-fs: Ignoring removed i_version option [ 430.851522][T10613] EXT4-fs: Ignoring removed bh option [ 430.932118][T10613] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.021862][T10613] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.280422][ T9977] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.458723][T10648] loop5: detected capacity change from 0 to 2048 [ 433.513202][T10648] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 433.550056][T10648] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 436.201889][ T5809] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 436.419862][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.451042][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.472275][ T5809] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 436.487185][ T5809] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 436.532722][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.555088][ T5809] usb 2-1: config 0 descriptor?? [ 436.640916][T10688] loop3: detected capacity change from 0 to 4096 [ 437.022326][ T5809] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x4 [ 437.044619][ T5809] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 437.119144][ T5809] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 437.437752][T10712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.478697][ T5809] usb 2-1: USB disconnect, device number 31 [ 438.423552][T10729] loop1: detected capacity change from 0 to 4096 [ 439.823922][T10751] ªªªªªª: renamed from vlan0 (while UP) [ 440.292347][ T5812] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 440.436749][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.443577][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.486071][ T5812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.503418][ T5812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.504507][ T5810] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 440.518174][ T5812] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 440.538935][ T5812] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 440.557608][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.602626][ T5812] usb 6-1: config 0 descriptor?? [ 440.733691][ T5810] usb 4-1: Using ep0 maxpacket: 32 [ 440.765619][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 219, changing to 11 [ 440.791567][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50507, setting to 1024 [ 440.809613][ T5810] usb 4-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 440.824578][ T5810] usb 4-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 440.852339][ T5810] usb 4-1: Product: syz [ 440.859937][ T5810] usb 4-1: Manufacturer: syz [ 440.877335][ T5810] usb 4-1: config 0 descriptor?? [ 440.891574][T10760] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 441.068225][ T5812] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x4 [ 441.096091][ T5812] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 441.161400][ T5812] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 441.415218][ T5812] usb 6-1: USB disconnect, device number 2 [ 441.476192][ T5810] hid-generic 0003:25DD:F3D2.002A: hiddev1,hidraw1: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.3-1/input0 [ 441.576505][T10779] fido_id[10779]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 441.752826][ T5811] usb 4-1: USB disconnect, device number 40 [ 441.834878][T10783] fido_id[10783]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 441.914230][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 442.305170][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.976931][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.987577][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 442.997120][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.007811][ T9] usb 3-1: config 0 descriptor?? [ 443.117243][T10796] input: syz1 as /devices/virtual/input/input41 [ 443.434622][T10807] loop1: detected capacity change from 0 to 16 [ 443.455912][T10807] erofs: (device loop1): mounted with root inode @ nid 36. [ 443.473666][ T9] cm6533_jd 0003:0D8C:0022.002B: unknown main item tag 0x0 [ 443.495309][ T9] cm6533_jd 0003:0D8C:0022.002B: unknown main item tag 0x0 [ 443.526950][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.002B/input/input42 [ 443.632790][T10808] loop3: detected capacity change from 0 to 4096 [ 443.656837][ T9] cm6533_jd 0003:0D8C:0022.002B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 443.804964][ T9] usb 3-1: USB disconnect, device number 37 [ 444.789940][T10815] fido_id[10815]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 445.036816][T10826] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1602'. [ 445.211272][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 445.401372][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 445.425321][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 219, changing to 11 [ 445.459779][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50507, setting to 1024 [ 445.487091][ T9] usb 2-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 445.503696][ T9] usb 2-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 445.518172][ T9] usb 2-1: Product: syz [ 445.533627][ T9] usb 2-1: Manufacturer: syz [ 445.544471][ T9] usb 2-1: config 0 descriptor?? [ 445.568787][T10823] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 446.069734][ T9] hid-generic 0003:25DD:F3D2.002C: hiddev0,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.1-1/input0 [ 446.329914][T10861] loop5: detected capacity change from 0 to 8 [ 446.425399][T10861] SQUASHFS error: lzo decompression failed, data probably corrupt [ 446.434902][T10861] SQUASHFS error: Failed to read block 0x144: -5 [ 446.448965][T10861] SQUASHFS error: Unable to read metadata cache entry [142] [ 446.462431][ T5809] usb 2-1: USB disconnect, device number 32 [ 446.488115][T10861] SQUASHFS error: Unable to read inode 0x11f [ 447.461252][ T5812] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 447.661194][ T5812] usb 2-1: Using ep0 maxpacket: 32 [ 447.689645][ T5812] usb 2-1: config 0 has an invalid interface number: 74 but max is 0 [ 447.725496][ T5812] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.740437][ T5812] usb 2-1: config 0 has no interface number 0 [ 447.748530][ T5812] usb 2-1: config 0 interface 74 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 447.760500][ T5812] usb 2-1: config 0 interface 74 has no altsetting 0 [ 447.786468][ T5812] usb 2-1: New USB device found, idVendor=1ae7, idProduct=9003, bcdDevice=44.08 [ 447.801508][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.809953][ T5812] usb 2-1: Product: syz [ 447.816734][ T5812] usb 2-1: Manufacturer: syz [ 447.822572][ T5812] usb 2-1: SerialNumber: syz [ 448.051532][ T5812] usb 2-1: config 0 descriptor?? [ 448.620390][ T5812] em28xx 2-1:0.74: New device syz syz @ 480 Mbps (1ae7:9003, interface 74, class 74) [ 448.630404][ T5812] em28xx 2-1:0.74: Video interface 74 found: [ 449.161322][T10911] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1635'. [ 449.802016][ T5812] em28xx 2-1:0.74: unknown em28xx chip ID (0) [ 449.976157][ T5812] em28xx 2-1:0.74: reading from i2c device at 0xa0 failed (error=-5) [ 450.004345][T10920] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1639'. [ 450.005338][ T5812] em28xx 2-1:0.74: board has no eeprom [ 450.064613][ T5812] em28xx 2-1:0.74: writing to i2c device at 0xb8 failed (error=-5) [ 450.091996][ T5812] em28xx 2-1:0.74: couldn't read from i2c device 0xb8: error -5 [ 450.120653][ T5812] em28xx 2-1:0.74: writing to i2c device at 0xba failed (error=-5) [ 450.140784][ T5812] em28xx 2-1:0.74: couldn't read from i2c device 0xba: error -5 [ 450.159628][ T5812] em28xx 2-1:0.74: writing to i2c device at 0x90 failed (error=-5) [ 450.170172][ T5812] em28xx 2-1:0.74: couldn't read from i2c device 0x90: error -5 [ 450.184976][ T5812] em28xx 2-1:0.74: writing to i2c device at 0x42 failed (error=-5) [ 450.196417][ T5812] em28xx 2-1:0.74: couldn't read from i2c device 0x42: error -5 [ 450.209006][ T5812] em28xx 2-1:0.74: writing to i2c device at 0x60 failed (error=-5) [ 450.221384][ T5812] em28xx 2-1:0.74: couldn't read from i2c device 0x60: error -5 [ 450.234984][ T5812] em28xx 2-1:0.74: No sensor detected [ 450.311207][ T5812] em28xx 2-1:0.74: Identified as SpeedLink Vicious And Devine Laplace webcam (card=91) [ 450.332090][ T5812] em28xx 2-1:0.74: Currently, V4L2 is not supported on this model [ 450.347258][ T1561] em28xx 2-1:0.74: Registering snapshot button... [ 450.390050][ T1561] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.74/input/input43 [ 450.402363][ T5812] usb 2-1: USB disconnect, device number 33 [ 450.422314][ T5812] em28xx 2-1:0.74: Disconnecting em28xx [ 450.512657][ T1561] em28xx 2-1:0.74: Remote control support is not available for this card. [ 450.627872][ T5812] em28xx 2-1:0.74: Closing input extension [ 450.637438][ T5812] em28xx 2-1:0.74: Deregistering snapshot button [ 451.407083][T10940] block nbd1: shutting down sockets [ 451.594875][ T5812] em28xx 2-1:0.74: Freeing device [ 452.151308][T10931] loop5: detected capacity change from 0 to 32768 [ 452.223471][T10931] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 453.014693][T10931] XFS (loop5): Ending clean mount [ 453.102596][T10931] XFS (loop5): Quotacheck needed: Please wait. [ 453.271672][T10931] XFS (loop5): Quotacheck: Done. [ 453.321840][T10976] netlink: 'syz.3.1654': attribute type 3 has an invalid length. [ 453.451196][ T28] audit: type=1800 audit(2000000583.998:27): pid=10931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1642" name="file1" dev="loop5" ino=6150 res=0 errno=0 [ 453.602619][ T9977] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 455.724846][T11000] loop1: detected capacity change from 0 to 32768 [ 455.750685][T11000] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 456.034442][ T5930] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 458.124266][T11028] loop3: detected capacity change from 0 to 32768 [ 458.168220][T11028] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 458.375422][ T5897] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 459.236666][T11075] loop5: detected capacity change from 0 to 16 [ 459.255967][T11075] erofs: (device loop5): mounted with root inode @ nid 36. [ 459.533405][ T28] audit: type=1326 audit(2000000590.088:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11083 comm="syz.5.1696" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81f679ce59 code=0x0 [ 459.901390][ T5810] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 460.070588][T11102] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1702'. [ 460.121889][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.121928][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.121952][ T5810] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 460.122032][ T5810] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 460.122059][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.124933][ T5810] usb 4-1: config 0 descriptor?? [ 460.559915][ T5810] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 461.244893][ T5810] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 462.141191][T11139] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1713'. [ 462.695118][ T1561] usb 4-1: USB disconnect, device number 41 [ 462.878944][T11150] loop3: detected capacity change from 0 to 512 [ 462.928544][T11150] EXT4-fs: Ignoring removed nomblk_io_submit option [ 463.135535][T11150] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 463.468747][T11150] EXT4-fs (loop3): 1 truncate cleaned up [ 463.641943][T11150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.994324][T11159] loop5: detected capacity change from 0 to 16 [ 464.039847][T11159] erofs: (device loop5): mounted with root inode @ nid 36. [ 464.172930][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.832082][T11172] loop1: detected capacity change from 0 to 4096 [ 465.024991][T11172] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 465.069091][T11172] ntfs3: loop1: Failed to load $Extend (-22). [ 465.087993][T11172] ntfs3: loop1: Failed to initialize $Extend. [ 465.184402][T11182] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 467.080984][T11195] loop5: detected capacity change from 0 to 128 [ 467.401187][T11197] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 467.868371][T11208] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 468.021253][T11210] loop5: detected capacity change from 0 to 4096 [ 468.089607][T11214] loop1: detected capacity change from 0 to 256 [ 468.106323][T11217] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 468.127309][T11214] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 468.158518][ T28] audit: type=1800 audit(2000000598.708:29): pid=11210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1739" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 468.213595][ T28] audit: type=1800 audit(2000000598.738:30): pid=11210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1739" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 468.249814][T11214] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 468.298772][T11214] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 468.753194][T11221] binder: 11220:11221 ioctl c0306201 2000000003c0 returned -14 [ 469.961241][ T1561] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 470.173298][ T1561] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 470.193715][ T1561] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 470.228462][ T1561] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 470.251264][ T5812] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 470.273574][ T1561] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.424785][T11251] loop1: detected capacity change from 0 to 256 [ 470.461641][ T5812] usb 4-1: Using ep0 maxpacket: 16 [ 470.487094][ T5812] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 88, setting to 64 [ 470.508623][T11251] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 470.527660][ T1561] usb 6-1: usb_control_msg returned -32 [ 470.534544][ T5812] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1023 [ 470.551128][ T1561] usbtmc 6-1:16.0: can't read capabilities [ 470.567942][ T5812] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 470.608652][ T5812] usb 4-1: string descriptor 0 read error: -22 [ 470.622569][ T5812] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 470.634060][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.679626][T11240] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 470.695657][ T5812] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 470.703173][ T5812] usb 4-1: MIDIStreaming interface descriptor not found [ 471.229686][ T5810] usb 4-1: USB disconnect, device number 42 [ 472.029567][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1761'. [ 472.240903][T11275] input: syz0 as /devices/virtual/input/input44 [ 473.035581][ T787] usb 6-1: USB disconnect, device number 3 [ 473.339610][ T28] audit: type=1326 audit(2000000603.888:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11286 comm="syz.2.1765" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde1af9ce59 code=0x0 [ 473.660187][T11294] loop1: detected capacity change from 0 to 1024 [ 473.730808][T11294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 473.748853][T11294] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.776076][T11294] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.1767: lblock 3 mapped to illegal pblock 3 (length 3) [ 473.831392][T11294] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 473.846125][T11294] EXT4-fs (loop1): This should not happen!! Data will be lost [ 473.846125][T11294] [ 473.861617][T11300] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1767: bg 0: block 112: padding at end of block bitmap is not set [ 473.886566][T11300] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 473.900107][T11300] EXT4-fs (loop1): This should not happen!! Data will be lost [ 473.900107][T11300] [ 473.920960][T11300] EXT4-fs (loop1): Total free blocks count 0 [ 473.933371][T11300] EXT4-fs (loop1): Free/Dirty block details [ 473.950452][T11300] EXT4-fs (loop1): free_blocks=0 [ 473.965634][T11300] EXT4-fs (loop1): dirty_blocks=64 [ 473.978836][T11300] EXT4-fs (loop1): Block reservation details [ 474.995621][ T11] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 476.143526][T11328] "syz.1.1777" (11328) uses obsolete ecb(arc4) skcipher [ 477.552451][T11343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1783'. [ 478.435480][T11334] loop5: detected capacity change from 0 to 32768 [ 478.501490][T11334] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 479.502116][ T1561] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 479.697190][ T1561] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.715072][ T1561] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.729456][ T1561] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 479.747457][ T1561] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 479.758180][ T1561] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.793826][ T1561] usb 2-1: config 0 descriptor?? [ 481.290693][T11405] gtp0: entered allmulticast mode [ 481.368557][T11407] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 481.403392][ T1561] plantronics 0003:047F:FFFF.002E: unknown main item tag 0xd [ 481.424580][ T1561] plantronics 0003:047F:FFFF.002E: No inputs registered, leaving [ 481.444815][ T1561] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 481.717623][ T1561] usb 2-1: USB disconnect, device number 34 [ 481.986240][T11419] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1809'. [ 482.960339][T11426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1812'. [ 483.367219][T11439] syz_tun: entered promiscuous mode [ 483.376169][T11439] syz_tun: left promiscuous mode [ 483.541408][ T6892] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 483.640070][T11447] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1820'. [ 483.731222][ T6892] usb 2-1: Using ep0 maxpacket: 32 [ 483.753317][ T6892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.782357][ T6892] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 483.818134][ T6892] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 483.828466][ T6892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.860636][ T6892] usb 2-1: Product: syz [ 483.975827][ T6892] usb 2-1: Manufacturer: syz [ 483.980557][ T6892] usb 2-1: SerialNumber: syz [ 484.006751][ T6892] usb 2-1: config 0 descriptor?? [ 485.445019][T11476] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1830'. [ 486.603455][ T787] usb 2-1: USB disconnect, device number 35 [ 486.695095][T11489] netlink: 'syz.3.1838': attribute type 3 has an invalid length. [ 486.886240][T11498] loop5: detected capacity change from 0 to 128 [ 487.002637][T11499] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1841'. [ 488.321542][T11493] loop1: detected capacity change from 0 to 32768 [ 488.407741][T11493] JBD2: Ignoring recovery information on journal [ 488.531437][ T5809] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 488.771562][ T5809] usb 4-1: Using ep0 maxpacket: 8 [ 488.811731][T11493] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 488.830247][ T5809] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 488.958529][ T5809] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 489.159128][ T5809] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 489.301821][ T5809] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 489.382224][ T5809] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 489.431410][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.452249][T11524] [ 489.454657][T11524] ====================================================== [ 489.461699][T11524] WARNING: possible circular locking dependency detected [ 489.468831][T11524] syzkaller #0 Not tainted [ 489.473436][T11524] ------------------------------------------------------ [ 489.480467][T11524] syz.1.1837/11524 is trying to acquire lock: [ 489.486572][T11524] ffff88805f225f58 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 489.499907][T11524] [ 489.499907][T11524] but task is already holding lock: [ 489.507270][T11524] ffff88805390ce38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 489.516942][T11524] [ 489.516942][T11524] which lock already depends on the new lock. [ 489.516942][T11524] [ 489.527440][T11524] [ 489.527440][T11524] the existing dependency chain (in reverse order) is: [ 489.536463][T11524] [ 489.536463][T11524] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 489.544489][T11524] down_read+0x46/0x2e0 [ 489.549178][T11524] ocfs2_init_acl+0x30a/0x770 [ 489.554385][T11524] ocfs2_mknod+0x140f/0x2300 [ 489.559678][T11524] ocfs2_mkdir+0x196/0x430 [ 489.564709][T11524] vfs_mkdir+0x296/0x440 [ 489.569474][T11524] do_mkdirat+0x1dc/0x450 [ 489.574352][T11524] __x64_sys_mkdirat+0x89/0xa0 [ 489.579656][T11524] do_syscall_64+0x55/0xb0 [ 489.584607][T11524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 489.591031][T11524] [ 489.591031][T11524] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 489.599566][T11524] down_read+0x46/0x2e0 [ 489.604248][T11524] ocfs2_start_trans+0x3a8/0x6f0 [ 489.609717][T11524] ocfs2_mknod+0xf1d/0x2300 [ 489.614839][T11524] ocfs2_create+0x196/0x430 [ 489.619870][T11524] path_openat+0x12a0/0x3230 [ 489.625085][T11524] do_filp_open+0x1f5/0x430 [ 489.630120][T11524] do_sys_openat2+0x134/0x1d0 [ 489.635507][T11524] __x64_sys_openat+0x139/0x160 [ 489.640885][T11524] do_syscall_64+0x55/0xb0 [ 489.645825][T11524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 489.652248][T11524] [ 489.652248][T11524] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 489.659738][T11524] ocfs2_start_trans+0x2a9/0x6f0 [ 489.665290][T11524] ocfs2_mknod+0xf1d/0x2300 [ 489.670326][T11524] ocfs2_create+0x196/0x430 [ 489.675375][T11524] path_openat+0x12a0/0x3230 [ 489.680513][T11524] do_filp_open+0x1f5/0x430 [ 489.685606][T11524] do_sys_openat2+0x134/0x1d0 [ 489.690820][T11524] __x64_sys_openat+0x139/0x160 [ 489.696402][T11524] do_syscall_64+0x55/0xb0 [ 489.701441][T11524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 489.708217][T11524] [ 489.708217][T11524] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 489.718784][T11524] down_write+0x97/0x200 [ 489.723578][T11524] ocfs2_reserve_local_alloc_bits+0x120/0x2600 [ 489.730451][T11524] ocfs2_reserve_clusters_with_limit+0x1ba/0xc20 [ 489.737324][T11524] ocfs2_mknod+0xebb/0x2300 [ 489.742482][T11524] ocfs2_create+0x196/0x430 [ 489.747523][T11524] path_openat+0x12a0/0x3230 [ 489.752643][T11524] do_filp_open+0x1f5/0x430 [ 489.757672][T11524] do_sys_openat2+0x134/0x1d0 [ 489.762881][T11524] __x64_sys_openat+0x139/0x160 [ 489.768265][T11524] do_syscall_64+0x55/0xb0 [ 489.773207][T11524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 489.779813][T11524] [ 489.779813][T11524] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 489.790347][T11524] __lock_acquire+0x2df1/0x7d40 [ 489.795735][T11524] lock_acquire+0x19e/0x420 [ 489.800768][T11524] down_write+0x97/0x200 [ 489.805541][T11524] ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 489.812051][T11524] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 489.819028][T11524] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 489.825277][T11524] ocfs2_xattr_set+0xc3f/0x13e0 [ 489.830656][T11524] __vfs_setxattr+0x431/0x470 [ 489.835892][T11524] __vfs_setxattr_noperm+0x12d/0x5e0 [ 489.841888][T11524] vfs_setxattr+0x16b/0x2f0 [ 489.846935][T11524] path_setxattr+0x3f3/0x5d0 [ 489.852058][T11524] __x64_sys_lsetxattr+0xb8/0xd0 [ 489.857523][T11524] do_syscall_64+0x55/0xb0 [ 489.862640][T11524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 489.869075][T11524] [ 489.869075][T11524] other info that might help us debug this: [ 489.869075][T11524] [ 489.879316][T11524] Chain exists of: [ 489.879316][T11524] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 489.879316][T11524] [ 489.896281][T11524] Possible unsafe locking scenario: [ 489.896281][T11524] [ 489.904012][T11524] CPU0 CPU1 [ 489.909385][T11524] ---- ---- [ 489.914756][T11524] lock(&oi->ip_xattr_sem); [ 489.919367][T11524] lock(&journal->j_trans_barrier); [ 489.927182][T11524] lock(&oi->ip_xattr_sem); [ 489.934383][T11524] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 489.941677][T11524] [ 489.941677][T11524] *** DEADLOCK *** [ 489.941677][T11524] [ 489.949825][T11524] 3 locks held by syz.1.1837/11524: [ 489.955116][T11524] #0: ffff88805acb6418 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 489.964543][T11524] #1: ffff88805390d118 (&sb->s_type->i_mutex_key#25){+.+.}-{3:3}, at: vfs_setxattr+0x144/0x2f0 [ 489.975179][T11524] #2: ffff88805390ce38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 489.985295][T11524] [ 489.985295][T11524] stack backtrace: [ 489.991376][T11524] CPU: 1 PID: 11524 Comm: syz.1.1837 Not tainted syzkaller #0 [ 489.998848][T11524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 490.008917][T11524] Call Trace: [ 490.012292][T11524] [ 490.015267][T11524] dump_stack_lvl+0x18c/0x250 [ 490.020044][T11524] ? load_image+0x420/0x420 [ 490.024645][T11524] ? show_regs_print_info+0x20/0x20 [ 490.029941][T11524] ? print_circular_bug+0x12b/0x1a0 [ 490.035151][T11524] check_noncircular+0x2fc/0x400 [ 490.040217][T11524] ? print_deadlock_bug+0x5d0/0x5d0 [ 490.045471][T11524] ? lockdep_lock+0xf5/0x230 [ 490.050087][T11524] ? _find_first_zero_bit+0xd3/0x100 [ 490.055472][T11524] __lock_acquire+0x2df1/0x7d40 [ 490.060351][T11524] ? __lock_acquire+0x7d40/0x7d40 [ 490.065407][T11524] ? verify_lock_unused+0x140/0x140 [ 490.070629][T11524] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 490.076272][T11524] ? do_raw_spin_lock+0x11f/0x2c0 [ 490.081395][T11524] ? mutex_unlock+0x10/0x10 [ 490.085909][T11524] lock_acquire+0x19e/0x420 [ 490.090602][T11524] ? ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 490.096681][T11524] ? ocfs2_get_system_file_inode+0x202/0x850 [ 490.102674][T11524] ? __might_sleep+0xe0/0xe0 [ 490.107278][T11524] ? read_lock_is_recursive+0x20/0x20 [ 490.112663][T11524] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 490.118829][T11524] ? check_noncircular+0x18a/0x400 [ 490.123999][T11524] ? verify_lock_unused+0x140/0x140 [ 490.129217][T11524] down_write+0x97/0x200 [ 490.133468][T11524] ? ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 490.139555][T11524] ? down_read_killable+0x340/0x340 [ 490.144851][T11524] ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 490.150854][T11524] ? mark_lock+0x94/0x320 [ 490.155315][T11524] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 490.161452][T11524] ? lock_chain_count+0x20/0x20 [ 490.166506][T11524] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 490.172423][T11524] ? lockdep_hardirqs_on+0x98/0x150 [ 490.177630][T11524] ? ocfs2_block_group_search+0x470/0x470 [ 490.183359][T11524] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 490.189260][T11524] ? _raw_spin_unlock+0x40/0x40 [ 490.194121][T11524] ? stack_trace_save+0xaa/0x100 [ 490.199430][T11524] ? stack_trace_snprint+0xf0/0xf0 [ 490.204571][T11524] ? __stack_depot_save+0x560/0x630 [ 490.209789][T11524] ? kasan_set_track+0x5f/0x70 [ 490.214568][T11524] ? kasan_set_track+0x4e/0x70 [ 490.219510][T11524] ? __kasan_kmalloc+0x8f/0xa0 [ 490.224282][T11524] ? ocfs2_reserve_new_metadata_blocks+0x10d/0x9a0 [ 490.230798][T11524] ? ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 490.236705][T11524] ? ocfs2_xattr_set+0xc3f/0x13e0 [ 490.241740][T11524] ? __vfs_setxattr+0x431/0x470 [ 490.246613][T11524] ? __vfs_setxattr_noperm+0x12d/0x5e0 [ 490.252083][T11524] ? vfs_setxattr+0x16b/0x2f0 [ 490.256770][T11524] ? path_setxattr+0x3f3/0x5d0 [ 490.261553][T11524] ? __x64_sys_lsetxattr+0xb8/0xd0 [ 490.266672][T11524] ? do_syscall_64+0x55/0xb0 [ 490.271273][T11524] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.277405][T11524] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 490.283845][T11524] ? ocfs2_init_steal_slots+0x160/0x160 [ 490.289406][T11524] ? ocfs2_xattr_block_set+0x2e30/0x2e30 [ 490.295233][T11524] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 490.300881][T11524] ? ocfs2_xattr_set+0xc05/0x13e0 [ 490.305916][T11524] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 490.312082][T11524] ? ocfs2_truncate_log_needs_flush+0x130/0x310 [ 490.318340][T11524] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 490.324341][T11524] ? down_write+0x16e/0x200 [ 490.328940][T11524] ? down_read_killable+0x340/0x340 [ 490.334282][T11524] ? up_write+0x1c3/0x410 [ 490.338619][T11524] ocfs2_xattr_set+0xc3f/0x13e0 [ 490.343501][T11524] ? __ocfs2_xattr_set_handle+0xf40/0xf40 [ 490.349261][T11524] ? __lock_acquire+0x1347/0x7d40 [ 490.354300][T11524] ? verify_lock_unused+0x140/0x140 [ 490.359517][T11524] ? ____kasan_slab_free+0x126/0x1e0 [ 490.364908][T11524] ? aa_get_newest_label+0xfd/0x5c0 [ 490.370230][T11524] ? end_current_label_crit_section+0x170/0x170 [ 490.376533][T11524] ? posix_xattr_acl+0x93/0xb0 [ 490.381313][T11524] ? ocfs2_xattr_trusted_get+0x40/0x40 [ 490.386800][T11524] __vfs_setxattr+0x431/0x470 [ 490.391501][T11524] __vfs_setxattr_noperm+0x12d/0x5e0 [ 490.396890][T11524] vfs_setxattr+0x16b/0x2f0 [ 490.401409][T11524] ? xattr_permission+0x470/0x470 [ 490.406444][T11524] ? __mnt_want_write+0x223/0x2a0 [ 490.411492][T11524] ? path_setxattr+0x3a1/0x5d0 [ 490.416441][T11524] path_setxattr+0x3f3/0x5d0 [ 490.421060][T11524] ? simple_xattrs_free+0x150/0x150 [ 490.426453][T11524] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 490.432450][T11524] ? lock_chain_count+0x20/0x20 [ 490.437320][T11524] __x64_sys_lsetxattr+0xb8/0xd0 [ 490.442618][T11524] do_syscall_64+0x55/0xb0 [ 490.447132][T11524] ? clear_bhb_loop+0x40/0x90 [ 490.451872][T11524] ? clear_bhb_loop+0x40/0x90 [ 490.456562][T11524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.462469][T11524] RIP: 0033:0x7f0d2eb9ce59 [ 490.466994][T11524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.486793][T11524] RSP: 002b:00007f0d2fa67028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 490.495396][T11524] RAX: ffffffffffffffda RBX: 00007f0d2ee16090 RCX: 00007f0d2eb9ce59 [ 490.503901][T11524] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 00002000000001c0 [ 490.511884][T11524] RBP: 00007f0d2ec32d6f R08: 0000000000000000 R09: 0000000000000000 [ 490.519876][T11524] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 490.527859][T11524] R13: 00007f0d2ee16128 R14: 00007f0d2ee16090 R15: 00007ffc80a773b8 [ 490.536060][T11524] [ 490.657630][ T5780] ocfs2: Unmounting device (7,1) on (node local) [ 490.661358][ T5772] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 490.805171][ T5809] usb 4-1: GET_CAPABILITIES returned 0 [ 490.810898][ T5809] usbtmc 4-1:16.0: can't read capabilities [ 490.903542][ T5772] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.916352][ T5772] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 490.925456][ T5772] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.933726][ T5772] usb 6-1: Product: syz [ 490.937905][ T5772] usb 6-1: Manufacturer: syz [ 490.942540][ T5772] usb 6-1: SerialNumber: syz [ 491.023106][ T1561] usb 4-1: USB disconnect, device number 43 [ 491.958915][ T5772] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 491.965569][ T5772] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 491.973106][ T5772] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 492.161425][ T5772] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 492.167916][ T5772] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1 [ 492.181307][ T5772] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1 [ 492.190415][ T5772] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 492.209407][ T5772] usb 6-1: USB disconnect, device number 4 [ 492.221314][ T5772] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 492.231321][ T5772] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1 [ 492.240569][ T5772] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1